last executing test programs: 2m30.503871409s ago: executing program 2 (id=503): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="d525f67500000025e0"], 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000240)=ANY=[@ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m27.917562951s ago: executing program 2 (id=508): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000040)={[{@grpjquota}, {@i_version}, {@i_version}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) 2m26.848146243s ago: executing program 2 (id=512): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@buf={0x0, &(0x7f0000000500)}) 2m26.574405079s ago: executing program 2 (id=513): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333537372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) creat(&(0x7f0000000040)='./file0\x00', 0x81) 2m25.940219906s ago: executing program 2 (id=515): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000000c0)) 2m25.291435734s ago: executing program 2 (id=519): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x5, 0x5505, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x45) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x200, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000005880)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @broadcast}, 0xc) read(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000002380)) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_script(r2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000058c0)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m23.024830057s ago: executing program 32 (id=519): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x5, 0x5505, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x45) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x200, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000005880)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @broadcast}, 0xc) read(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000002380)) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_script(r2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000058c0)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 9.044479011s ago: executing program 3 (id=849): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00048, &(0x7f0000000140), 0x1, 0x7c8, &(0x7f0000001a80)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) 7.889477329s ago: executing program 1 (id=851): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f00000012c0)="$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") r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes256, 0x3c58ff6773201945, '\x00', @d}) 7.829428762s ago: executing program 3 (id=852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r3, r4, 0x0) r5 = socket(0x10, 0x80003, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) close_range(r5, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r7, 0x560f, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000000000000000000030000000003000000020000000000000000000000000000010500000020000000020000000000000e0300004fde00000000002e"], 0x0, 0x54}, 0x28) 6.348365358s ago: executing program 3 (id=854): openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000001c0)={0xdfc, 0x5, 0x0, 0x2000af, 0x8, "1b93000000000000000900"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x0, 0x3}, [@typed={0x4, 0x4, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000180)={@private0, r3}, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x7, &(0x7f0000000240)=[{0x1000, 0x8, 0xf9, 0xffffffff}, {0x80, 0xbb, 0xa, 0x2}, {0x0, 0x28, 0x5, 0x5}, {0x3, 0xc7, 0x1d, 0x3}, {0x3ff, 0x9, 0xbe, 0x7fffffff}, {0x81, 0x7, 0x7, 0x4}, {0x2, 0x3c, 0x5, 0x3}]}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000340)=[{&(0x7f0000001800)=""/248, 0xf8}], 0x1, 0x40000004, 0x0) 6.238102505s ago: executing program 1 (id=855): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) ppoll(&(0x7f0000000080)=[{r0, 0x400}, {r0, 0x120}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 5.676272128s ago: executing program 0 (id=859): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001780)=""/4071, 0x2ffe}], 0x1}, 0x40000102) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000180)="3efc9e9d", 0x4}], 0x1}, 0x0) 5.503182868s ago: executing program 0 (id=861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x12) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r3, 0x400, 0x2) socket$netlink(0x10, 0x3, 0x14) 5.138393929s ago: executing program 1 (id=863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="88000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c00028005000100000000002c00018006000340000100000c00028004c6010088000000140001800800011246f3a8f35e90aa7525", @ANYRES32], 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.44019126s ago: executing program 1 (id=865): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4a000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket(0x1e, 0x800, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$eJzs3c9rXNUeAPDvncmkSZv30j4ej9fyHi/wFi1I00wtVt3Y1oVdFCzYhYiLhiapodMfNCmYWGgKLhQURNyKdOM/4F66dyeCunMtVJGKikpH7syddDKZSdIkM9Pmfj5wM/ece2fO+c6dM/fce3PmBpBbY+mfQsT+iAfnk4jRpmUjUV84lq13/6ebF9IpiWr1lR+TSLK8xvpJ9rgnSwxFxJenIv5RXF3u3MLipclKte5WxJH5y9eOzC0sHp69PHlx+uL0lfLRZ48dn3iufKy8LXHuyR5Pn3n5P++//cYzM19VDidxIs6V3pqKlji2y1iMxYMsxOb8gYg4ns60eV+eNDsghFwrZp/HUkT8K0ajWEvVjcbse32tHNBV1WJEFcipRPuHnGr0AxrH9hs7Dj7X5V5J79w7WT8AWh3/QP3cSAzVjo1230+ajowGauc29m5D+WkZf9488HE6xYrzEL8ub52BbSink6XbEfHvdvEntbrtrUWaxl9YUY8kIiYiYjCr34tbqEPSNN+N8zBr2Wz8hYg4kT2m+ac2Wf5YS7rX8QOQT3dPZjvypTT1cP+X9j0a/Z9Y1f+pXxtq3XdtRr/3f537f439/VDtHHmhpR+W9lnOtn/JUmvGd++e/rBT+c39v3RKy2/0BXvh3u2IAy3xv5MGm/V/0viTNts/XeX8iY2V8dLXP5zutKzf8VfvRBxse/zzsFeazrVenxzOlpWPlY/MzFamJ+p/25bx+Revf9qp/H7Hn27/3R3ib9r+hdbnpe/JtQ2W8dnZO5c7LRtZN/7C94NJ/XhzMMt5c3J+/no5YjA5k61Sv5BVyz+6dl0a6zReI43/0P/bt/8Vn//bK19nuPGVuQHXXr10v9OyzWz/povJD6obrEMnafxT62//Ve0/zftgOXVrzTJ+ee3GfzstWyv+4S3GBgAAAAAAAHlTqF2DTQrjy/OFwvh4fbzsP2N3oXJ1bv6pmas3rkxFHKr9P2Sp0LjSPVpPJ2m6nP0/bCN9tCX9dETsi4iPisO19PiFq5WpfgcPAAAAAAAAAAAAAAAAAAAAj4k92fj/xn2qfy7Wx/8DOdHNG8wBjzftH/Kr1v5X3eIJyAP7f8gv7R/yS/uH/NL+Ib+0f8gv7R/yS/uH/NL+AQAAAGBH2ve/u98mEbH0/HBtSg1my4wIgp2t1O8KAH1T7HcFgL5ZvvSvsw+5s6H+/+/ZjwN2vzpAHyTtMmudg+rajf9u22cCAAAAAAAAAAAAAF1wcH/78f+JscGw4xn2B/m1hfH/fjoAnnB++h/yyzE+sN4o/qFOC4z/BwAAAAAAAAAAAICeGalNSWE8Gws8EoXC+HjE3yJib5SSmdnK9ERE/D0ivimWdqXpcr8rDQAAAAAAAAAAAAAAAAAAADvM3MLipclKZfp688wfq3J29kzjLqg9KOuFeMRnRdL7t2U4IpZzShGPWufuzezKPrZbeZ2BuYXF5LdqTRKxFI9PgFuKa5tn1v3qGOzqFxMAAAAAAAAAAAAAAAAAAORQ09jj9g580uMaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvPbz/f/dm+h0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBk+isAAP//GjM9YA==") mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000180)='./bus\x00', 0x6000, 0x0) 3.780140279s ago: executing program 4 (id=866): ioperm(0x2003, 0x1, 0x400) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") chroot(&(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) 2.970184726s ago: executing program 4 (id=867): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001100)={'syz1\x00', {0x7d, 0x1, 0x8000, 0x800}, 0x33, [0x3, 0x6, 0x4, 0x0, 0x2, 0x8000, 0xe3ff, 0x5, 0x2, 0x100, 0x2, 0x9, 0x4, 0x80000001, 0x2, 0x9, 0x5, 0x56, 0xb7b, 0x3, 0x9, 0x1000, 0x5, 0x0, 0xf5, 0x401, 0x0, 0x3, 0x0, 0x7fff, 0x30, 0x0, 0x16a, 0xa362, 0xffff, 0x2, 0xfff, 0x80000000, 0x6, 0x9, 0xceb, 0x7, 0x6, 0x1, 0xffffff81, 0x8, 0xf, 0x5d, 0x213, 0x4, 0x7, 0x889, 0x4, 0x2c, 0x0, 0x81, 0x2, 0xfffffffa, 0x7, 0x8, 0x5, 0x4, 0x401, 0x4], [0x9, 0x4, 0x9, 0xf204, 0x8, 0x2, 0x7, 0x7ff, 0x3, 0xff7, 0xfffffffb, 0x8, 0x7, 0x96, 0x1, 0x0, 0x2a, 0x8, 0x1, 0x2, 0xfffffffd, 0x101, 0x10, 0x8, 0x8, 0x6, 0x0, 0x5, 0x10, 0x8, 0x6, 0x5, 0x5252, 0x0, 0x5, 0x9, 0x7ff, 0xffffffff, 0xfff, 0x7, 0x4, 0xf, 0x8, 0xb, 0x0, 0x4, 0xd6, 0xfffeffff, 0x5, 0x0, 0xbba5, 0x80, 0x2, 0x0, 0x3, 0x80, 0x7fff, 0x2, 0x2, 0x8, 0xadf, 0xf61, 0x10000, 0x3], [0x3, 0x800, 0x0, 0xd, 0x0, 0x7, 0x7fff, 0x4, 0x9, 0xfffffffb, 0x7, 0x8001, 0x0, 0xa, 0x9de, 0x80000000, 0x6, 0x400, 0x70fe, 0x7ff, 0x6, 0x2, 0x3, 0x1cda8a03, 0x400, 0x25d, 0xc, 0xb79, 0x5, 0xfffffff8, 0x8759, 0x1, 0x0, 0x2, 0x8, 0x4, 0x80000001, 0x8, 0x3287, 0x3, 0x5, 0x6, 0x80000000, 0x3, 0xfffffc00, 0x1b6b2e28, 0x3, 0x8, 0x0, 0x2, 0x8001, 0xa91, 0x61d, 0xff, 0x1, 0x46, 0x7ff, 0x81, 0x1f, 0x105, 0x1000, 0x8, 0x7, 0x6], [0xed21, 0xfffffffe, 0xb, 0x7bf, 0x8, 0xb7, 0x0, 0x7fff, 0xffffffff, 0x10001, 0xffffff7f, 0x1, 0x2, 0x5, 0xf, 0x7, 0x2, 0x3, 0xa, 0x2, 0xffff, 0x8001, 0x3, 0xfffffffd, 0x8, 0x81, 0xffff8001, 0xffff7b2f, 0xd3, 0x6b5c, 0x0, 0x67a6, 0xe, 0xfffffff7, 0x8, 0x2, 0x2, 0x7fffffff, 0x80000000, 0xf, 0x2, 0xffffffff, 0xfd73, 0x5, 0xf, 0x8, 0x8, 0x8, 0x1, 0x7fffffff, 0x4, 0x1d2b1f23, 0x400, 0x3, 0xfffffffb, 0x7fffffff, 0x4, 0xff, 0xffffffff, 0x0, 0xffffffff, 0x1, 0x9, 0xe585]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 2.926962918s ago: executing program 1 (id=868): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x11, r1, 0x1, 0xf, 0x6, @broadcast}, 0x14) close(0x3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2c, 0x3, 0x0) splice(r3, 0x0, r2, 0x0, 0x4ff9c, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x567, &(0x7f0000000540)="$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") socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 2.891641091s ago: executing program 0 (id=869): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r1) socket(0x10, 0x803, 0x0) socket(0xa, 0x3, 0xff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r2], 0x18}, 0x40c0) 2.828598614s ago: executing program 3 (id=870): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x100000000, 0x2000000000000002, 0x3, 0xff, 0xc53, 0x7b, 0x1, 0x80000000}) 2.426904267s ago: executing program 4 (id=871): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x25, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) ppoll(&(0x7f0000000080)=[{r0, 0x400}, {r0, 0x120}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 2.284354796s ago: executing program 0 (id=872): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='cpuset\x00') setreuid(0xee01, 0xee01) utimensat(r0, 0x0, &(0x7f0000000880)={{0x77359400}}, 0x0) 2.284090326s ago: executing program 3 (id=873): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r3, &(0x7f00000001c0)=""/192, 0xc0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x25dfdbfe, {}, [{0x4}]}, 0x18}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendfile(r5, r1, &(0x7f0000000280)=0x80000000000000, 0x9e) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x8, 0x0) r7 = syz_io_uring_setup(0x2221, &(0x7f0000000240)={0x0, 0x6e7f, 0x2, 0x0, 0x5ce}, &(0x7f0000000000), &(0x7f00000005c0)) readv(r7, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d01"], 0x0) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) r8 = socket$inet6(0xa, 0x1, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900110000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x8000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffffffffffff}, 0x800, 0x0, 0x2, 0x1, 0x6, 0xbe}, 0x20) r10 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file1\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") ioctl$AUTOFS_IOC_CATATONIC(r10, 0x9362, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x101) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x1c1002, 0x98) dup3(r11, r4, 0x0) write(r0, &(0x7f0000000440)="94035ad785f32ad167b95b6d0b0000df790040fa379d12cfd33be2fc6c07b99b10174ea46e05e528d40600000000000000148e", 0x33) 2.118427916s ago: executing program 4 (id=874): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 2.020213952s ago: executing program 0 (id=875): ioperm(0x2003, 0x1, 0x400) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") chroot(0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) 1.713248069s ago: executing program 0 (id=876): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0xff, 0x2260, 0x1000, 0x9, 0x6, 0x8000, 0xf7fd, 0xe9, 0x200, 0xfffc, 0x5, 0xf9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002980)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002900)={0x20, 0x87, 0x2, 0x4}, 0x0}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) 1.576289748s ago: executing program 4 (id=877): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb0100180000000000000068000000680000000a000000000000000000000d0400000000000000010000060400000000000001"], &(0x7f0000001f40)=""/4086, 0x8a, 0xffa, 0x1}, 0x22) 1.479344063s ago: executing program 4 (id=878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x12) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) socket$netlink(0x10, 0x3, 0x14) 1.429437106s ago: executing program 1 (id=879): openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000001c0)={0xdfc, 0x5, 0x0, 0x2000af, 0x8, "1b93000000000000000900"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x0, 0x3}, [@typed={0x4, 0x4, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000180)={@private0, r3}, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000340)=[{&(0x7f0000001800)=""/248, 0xf8}], 0x1, 0x40000004, 0x0) 0s ago: executing program 3 (id=880): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@nombcache}, {@nolazytime}, {@nobh}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") kernel console output (not intermixed with test programs): detected capacity change from 0 to 40427 [ 246.203690][ T6948] F2FS-fs (loop2): invalid crc value [ 246.589498][ T6948] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 248.019185][ T6956] loop2: detected capacity change from 0 to 40427 [ 248.060555][ T6956] F2FS-fs (loop2): Found nat_bits in checkpoint [ 248.200142][ T6956] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 248.322042][ T5779] syz-executor: attempt to access beyond end of device [ 248.322042][ T5779] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 248.337224][ T5779] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 253.968772][ T7019] 9pnet_fd: Insufficient options for proto=fd [ 254.175440][ T7025] loop3: detected capacity change from 0 to 128 [ 254.409730][ T7028] loop0: detected capacity change from 0 to 64 [ 254.512360][ T7025] syz.3.294: attempt to access beyond end of device [ 254.512360][ T7025] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 256.457403][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.464156][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.162248][ T7045] loop3: detected capacity change from 0 to 512 [ 257.208884][ T7045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.429167][ T7050] process 'syz.1.300' launched './file2' with NULL argv: empty string added [ 259.834837][ T7061] syz.2.302 uses obsolete (PF_INET,SOCK_PACKET) [ 259.927796][ T5811] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 259.970782][ T7063] 9pnet_fd: Insufficient options for proto=fd [ 260.060286][ T7065] bridge0: port 3(syz_tun) entered blocking state [ 260.099612][ T7065] bridge0: port 3(syz_tun) entered disabled state [ 260.120436][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.134074][ T7065] syz_tun: entered allmulticast mode [ 260.136714][ T5811] usb 4-1: Using ep0 maxpacket: 32 [ 260.150919][ T7065] syz_tun: entered promiscuous mode [ 260.151601][ T5811] usb 4-1: device descriptor read/all, error -71 [ 260.175451][ T7065] bridge0: port 3(syz_tun) entered blocking state [ 260.182414][ T7065] bridge0: port 3(syz_tun) entered forwarding state [ 260.375136][ T7068] loop2: detected capacity change from 0 to 8192 [ 260.394397][ T7073] loop1: detected capacity change from 0 to 128 [ 260.409763][ T7073] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 260.436060][ T7073] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 260.801260][ T7079] loop1: detected capacity change from 0 to 64 [ 261.554638][ T7086] 9pnet_fd: Insufficient options for proto=fd [ 262.044678][ T5811] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 262.776065][ T5811] usb 3-1: Using ep0 maxpacket: 16 [ 262.790630][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.098208][ T6317] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 264.291265][ T6317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.298268][ T5811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 264.315288][ T5811] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 264.324411][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.338324][ T5811] usb 3-1: config 0 descriptor?? [ 264.359301][ T6317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.398334][ T6317] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.434302][ T6317] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.463303][ T6317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.756405][ T6317] usb 4-1: config 0 descriptor?? [ 264.781460][ T5811] usbhid 3-1:0.0: can't add hid device: -71 [ 264.811016][ T5811] usbhid: probe of 3-1:0.0 failed with error -71 [ 264.977771][ T5811] usb 3-1: USB disconnect, device number 3 [ 265.483119][ T7111] loop0: detected capacity change from 0 to 1024 [ 265.539048][ T7111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 265.568304][ T6317] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 265.576086][ T6317] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 265.583534][ T6317] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 265.595665][ T6317] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 265.604117][ T6317] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 265.611685][ T6317] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 265.619191][ T6317] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 265.626727][ T6317] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 265.634180][ T6317] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 265.641711][ T6317] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 265.649230][ T6317] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 265.657439][ T7111] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.660791][ T6317] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 265.738046][ T6317] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 265.763122][ T7111] EXT4-fs error (device loop0): ext4_free_blocks:6692: comm syz.0.321: Freeing blocks not in datazone - block = 0, count = 16 [ 267.482158][ T6317] usb 4-1: USB disconnect, device number 4 [ 267.655454][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 267.691636][ T7121] fido_id[7121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 267.713104][ T7125] 9pnet_fd: Insufficient options for proto=fd [ 267.857028][ T7129] loop2: detected capacity change from 0 to 256 [ 268.019089][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 268.943237][ T7147] 9pnet_fd: Insufficient options for proto=fd [ 269.399165][ T7153] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 274.276120][ T7184] loop3: detected capacity change from 0 to 16 [ 274.339138][ T7184] erofs: (device loop3): mounted with root inode @ nid 36. [ 274.350938][ T7184] overlayfs: failed to resolve './bus': -2 [ 274.923206][ T7173] loop1: detected capacity change from 0 to 40427 [ 275.000880][ T7173] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 275.059628][ T7173] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 275.129990][ T7173] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 275.185615][ T7173] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 275.247928][ T7173] F2FS-fs (loop1): Image doesn't support compression [ 275.303470][ T7173] F2FS-fs (loop1): invalid crc value [ 275.367716][ T7173] F2FS-fs (loop1): Found nat_bits in checkpoint [ 275.627915][ T7173] F2FS-fs (loop1): Start checkpoint disabled! [ 275.692671][ T7173] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 275.730800][ T7173] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 276.077355][ T7195] 9pnet_fd: Insufficient options for proto=fd [ 276.205469][ T7197] loop2: detected capacity change from 0 to 512 [ 276.258152][ T7197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.326420][ T5811] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 276.429799][ T1141] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0 [ 276.441693][ T1141] F2FS-fs (loop1): invalid blkaddr: 5120, type: 7, run fsck to fix. [ 276.451645][ T1141] kworker/u4:8: attempt to access beyond end of device [ 276.451645][ T1141] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 276.468968][ T1141] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 276.489699][ T1141] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 276.516921][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 276.544213][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.561044][ T5811] usb 1-1: config 0 has no interfaces? [ 276.584731][ T5811] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 276.616084][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.667341][ T5811] usb 1-1: config 0 descriptor?? [ 276.984380][ T7206] loop2: detected capacity change from 0 to 128 [ 277.050686][ T7206] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 277.145546][ T7206] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 277.347789][ T5779] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 280.311987][ T1190] usb 1-1: USB disconnect, device number 2 [ 280.466378][ T7222] loop1: detected capacity change from 0 to 256 [ 280.844443][ T7222] FAT-fs (loop1): Directory bread(block 64) failed [ 280.851314][ T7222] FAT-fs (loop1): Directory bread(block 65) failed [ 280.858304][ T7222] FAT-fs (loop1): Directory bread(block 66) failed [ 280.866016][ T7222] FAT-fs (loop1): Directory bread(block 67) failed [ 280.873014][ T7222] FAT-fs (loop1): Directory bread(block 68) failed [ 280.879772][ T7222] FAT-fs (loop1): Directory bread(block 69) failed [ 280.886982][ T7222] FAT-fs (loop1): Directory bread(block 70) failed [ 280.893647][ T7222] FAT-fs (loop1): Directory bread(block 71) failed [ 280.900819][ T7222] FAT-fs (loop1): Directory bread(block 72) failed [ 280.907570][ T7222] FAT-fs (loop1): Directory bread(block 73) failed [ 281.401703][ T7228] binder_alloc: binder_alloc_mmap_handler: 7224 200000ffe000-200001000000 already mapped failed -16 [ 281.766238][ T7234] 9pnet_fd: Insufficient options for proto=fd [ 282.286173][ T7241] loop3: detected capacity change from 0 to 8192 [ 282.317001][ T7245] syzkaller0: entered promiscuous mode [ 282.322546][ T7245] syzkaller0: entered allmulticast mode [ 282.336023][ T5774] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 282.538688][ T5774] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 282.571022][ T5774] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 282.583147][ T7248] loop3: detected capacity change from 0 to 512 [ 282.604972][ T5774] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.620081][ T7248] EXT4-fs: Ignoring removed bh option [ 282.633684][ T7248] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 282.647036][ T5774] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 282.668048][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.685348][ T5774] usb 2-1: Product: syz [ 282.693244][ T5774] usb 2-1: Manufacturer: syz [ 282.703306][ T5774] usb 2-1: SerialNumber: syz [ 282.710837][ T7248] EXT4-fs (loop3): 1 truncate cleaned up [ 282.722038][ T5774] usblp0: Disabling reads from problematic bidirectional printer [ 282.732955][ T7248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.763704][ T28] audit: type=1800 audit(1770630389.097:7): pid=7248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.365" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 285.227306][ T5774] usblp 2-1:4.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 285.295170][ T5774] usb 2-1: USB disconnect, device number 2 [ 285.337494][ T5774] usblp0: removed [ 285.389407][ T7256] loop1: detected capacity change from 0 to 512 [ 285.486379][ T7256] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.368: inode has both inline data and extents flags [ 285.576096][ T7256] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.368: couldn't read orphan inode 15 (err -117) [ 285.621046][ T7256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.709221][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.831094][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.852659][ T7263] 9pnet_fd: Insufficient options for proto=fd [ 288.119328][ T7275] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 289.458470][ T7288] loop2: detected capacity change from 0 to 16 [ 289.537010][ T7288] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 290.931816][ T7300] 9pnet_fd: Insufficient options for proto=fd [ 291.206089][ T5774] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 291.398012][ T5774] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.422081][ T5774] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.458553][ T5774] usb 4-1: New USB device found, idVendor=10cf, idProduct=ea90, bcdDevice= 0.00 [ 291.476065][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.498042][ T5774] usb 4-1: config 0 descriptor?? [ 291.517720][ T5774] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 293.685423][ T7306] loop0: detected capacity change from 0 to 40427 [ 293.735982][ T7306] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 293.755012][ T7306] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 293.787923][ T7306] F2FS-fs (loop0): invalid crc value [ 293.804740][ T7306] F2FS-fs (loop0): Found nat_bits in checkpoint [ 293.926018][ T7306] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 293.942084][ T7306] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 295.318094][ T7333] loop1: detected capacity change from 0 to 16 [ 295.358724][ T7333] erofs: (device loop1): mounted with root inode @ nid 36. [ 296.301443][ T7338] loop2: detected capacity change from 0 to 64 [ 296.370138][ T5774] usb 4-1: USB disconnect, device number 5 [ 298.747510][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 298.927861][ T7356] loop0: detected capacity change from 0 to 16 [ 298.937035][ T7356] erofs: Unknown parameter '0x0000000000000003' [ 298.951729][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.983904][ T27] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 299.007376][ T5786] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 299.030154][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.058900][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.086394][ T27] usb 2-1: Product: syz [ 299.098494][ T27] usb 2-1: Manufacturer: syz [ 299.139248][ T27] usb 2-1: SerialNumber: syz [ 299.161795][ T27] cdc_mbim 2-1:1.0: skipping garbage [ 299.385161][ T7347] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 300.010308][ T7347] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 300.038824][ T27] cdc_mbim 2-1:1.0: setting rx_max = 16384 [ 300.256661][ T27] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 300.289682][ T27] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 300.338141][ T27] wwan wwan0: port wwan0mbim0 attached [ 300.431380][ T27] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, f6:6e:4f:54:94:13 [ 300.475586][ T27] usb 2-1: USB disconnect, device number 3 [ 300.483626][ T27] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 300.651955][ T27] wwan wwan0: port wwan0mbim0 disconnected [ 301.475137][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 301.707877][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 301.738323][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.774948][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.801089][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 301.825966][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.857661][ T8] usb 4-1: config 0 descriptor?? [ 301.872823][ T8] hub 4-1:0.0: USB hub found [ 301.895256][ T7370] loop2: detected capacity change from 0 to 64 [ 302.078533][ T8] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 303.181397][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 303.197989][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 303.252899][ T8] usb 4-1: USB disconnect, device number 6 [ 303.661442][ T7376] loop3: detected capacity change from 0 to 1024 [ 303.674571][ T7378] loop2: detected capacity change from 0 to 512 [ 303.723379][ T7376] EXT4-fs: Ignoring removed bh option [ 303.749393][ T7378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.772729][ T7378] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 303.788384][ T7376] EXT4-fs: Ignoring removed nobh option [ 303.843507][ T7368] loop1: detected capacity change from 0 to 40427 [ 303.850797][ T7376] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 303.929247][ T7368] F2FS-fs (loop1): Wrong NAT boundary, start(2560) end(3584) blocks(0) [ 303.967812][ T7368] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 303.990025][ T7368] F2FS-fs (loop1): Image doesn't support compression [ 304.008759][ T7376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.040987][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.052030][ T7368] F2FS-fs (loop1): Image doesn't support compression [ 304.095792][ T7368] F2FS-fs (loop1): Unrecognized mount option "whint_mode=fs-based" or missing value [ 304.299099][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.541360][ T7398] loop3: detected capacity change from 0 to 4096 [ 307.577056][ T7398] EXT4-fs (loop3): Test dummy encryption mode enabled [ 307.651965][ T7398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.993796][ T7398] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 308.260277][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.447246][ T28] audit: type=1326 audit(1770630414.777:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77eb99aeb9 code=0x7ffc0000 [ 308.504120][ T28] audit: type=1326 audit(1770630414.777:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77eb99aeb9 code=0x7ffc0000 [ 308.566189][ T28] audit: type=1326 audit(1770630414.777:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f77eb99aeb9 code=0x7ffc0000 [ 308.631039][ T28] audit: type=1326 audit(1770630414.787:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77eb99aeb9 code=0x7ffc0000 [ 308.686879][ T28] audit: type=1326 audit(1770630414.787:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f77eb99aeb9 code=0x7ffc0000 [ 308.730505][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 308.745977][ T28] audit: type=1326 audit(1770630414.787:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77eb99aeb9 code=0x7ffc0000 [ 308.757345][ T7415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.413'. [ 308.814352][ T7419] loop0: detected capacity change from 0 to 512 [ 308.819199][ T28] audit: type=1326 audit(1770630414.787:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77eb99aeb9 code=0x7ffc0000 [ 308.847137][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 308.866906][ T7417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.413'. [ 308.869941][ T7419] EXT4-fs: Ignoring removed bh option [ 308.948235][ T7419] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 309.349762][ T7419] EXT4-fs (loop0): 1 truncate cleaned up [ 309.563720][ T7419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.871792][ T7424] loop1: detected capacity change from 0 to 4096 [ 309.899963][ T7424] EXT4-fs: Ignoring removed nomblk_io_submit option [ 310.044368][ T7424] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c018, mo2=0002] [ 310.121711][ T7424] System zones: 0-5 [ 310.134147][ T7424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.428919][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.507028][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.899084][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.419'. [ 312.917223][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.419'. [ 313.075758][ T7442] loop2: detected capacity change from 0 to 40427 [ 313.091142][ T7442] F2FS-fs (loop2): heap/no_heap options were deprecated [ 313.101599][ T7442] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x7ffff [ 313.229923][ T7458] loop3: detected capacity change from 0 to 256 [ 313.408201][ T6060] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 313.467202][ T7462] loop0: detected capacity change from 0 to 128 [ 313.546670][ T7462] FAT-fs (loop0): Directory bread(block 414) failed [ 313.554145][ T7462] FAT-fs (loop0): Directory bread(block 415) failed [ 313.581106][ T7462] FAT-fs (loop0): Directory bread(block 416) failed [ 313.615987][ T7462] FAT-fs (loop0): Directory bread(block 417) failed [ 313.622692][ T7462] FAT-fs (loop0): Directory bread(block 418) failed [ 313.672223][ T7462] FAT-fs (loop0): Directory bread(block 419) failed [ 313.705356][ T7462] FAT-fs (loop0): Directory bread(block 420) failed [ 313.727246][ T7462] FAT-fs (loop0): Directory bread(block 421) failed [ 313.790741][ T7462] FAT-fs (loop0): Directory bread(block 414) failed [ 313.830488][ T7462] FAT-fs (loop0): Directory bread(block 415) failed [ 314.097459][ T7472] netlink: 'syz.0.432': attribute type 4 has an invalid length. [ 314.105302][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'. [ 314.423005][ T7482] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 314.435699][ T7482] overlayfs: missing 'lowerdir' [ 316.202097][ T7480] loop0: detected capacity change from 0 to 128 [ 316.382884][ T28] audit: type=1804 audit(1770630422.697:15): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.435" name="/newroot/108/file1/bus" dev="loop0" ino=1048611 res=1 errno=0 [ 316.441081][ T28] audit: type=1804 audit(1770630422.717:16): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.435" name="/newroot/108/file1/bus" dev="loop0" ino=1048611 res=1 errno=0 [ 316.495630][ T28] audit: type=1804 audit(1770630422.717:17): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.435" name="/newroot/108/file1/bus" dev="loop0" ino=1048611 res=1 errno=0 [ 316.842612][ T7495] overlayfs: failed to get inode (-116) [ 316.863475][ T7495] overlayfs: failed to get inode (-116) [ 317.151682][ T7501] loop2: detected capacity change from 0 to 512 [ 317.176971][ T7501] EXT4-fs: Ignoring removed mblk_io_submit option [ 317.215537][ T7501] EXT4-fs (loop2): orphan cleanup on readonly fs [ 317.236729][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 317.251842][ T7501] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 317.264941][ T7501] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.441: attempt to clear invalid blocks 2 len 1 [ 317.300867][ T7501] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 317.321114][ T7501] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.441: invalid indirect mapped block 1819239214 (level 0) [ 317.407629][ T7501] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.441: invalid indirect mapped block 1819239214 (level 1) [ 317.455998][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 317.622161][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.628966][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.716989][ T7501] EXT4-fs (loop2): 1 truncate cleaned up [ 317.869943][ T7501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 318.257516][ T8] usb 1-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 318.267767][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.284609][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 318.294124][ T8] usb 1-1: config 0 has no interface number 0 [ 318.306123][ T8] usb 1-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 318.315685][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.337666][ T7501] EXT4-fs (loop2): Quota file not on filesystem root. Journaled quota will not work [ 318.359207][ T8] usb 1-1: config 0 descriptor?? [ 318.489939][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.517185][ T7509] loop1: detected capacity change from 0 to 131072 [ 319.543819][ T7509] F2FS-fs (loop1): invalid crc value [ 319.566769][ T8] usb 1-1: USB disconnect, device number 3 [ 319.616458][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.442'. [ 319.662537][ T7512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.442'. [ 319.664748][ T7509] F2FS-fs (loop1): Found nat_bits in checkpoint [ 319.704165][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.442'. [ 319.728026][ T7509] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 319.764918][ T7512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.442'. [ 319.907067][ T6060] udevd[6060]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.796099][ T6317] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 320.988602][ T6317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 321.017503][ T6317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.043905][ T6317] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 321.063785][ T6317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.106482][ T6317] usb 3-1: config 0 descriptor?? [ 322.168134][ T6317] usbhid 3-1:0.0: can't add hid device: -71 [ 322.174417][ T6317] usbhid: probe of 3-1:0.0 failed with error -71 [ 322.194121][ T6317] usb 3-1: USB disconnect, device number 4 [ 324.304260][ T7541] loop1: detected capacity change from 0 to 512 [ 324.337396][ T7541] EXT4-fs: Ignoring removed orlov option [ 324.366454][ T7541] EXT4-fs: Ignoring removed mblk_io_submit option [ 324.388279][ T28] audit: type=1326 audit(1770630430.707:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.2.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69d39aeb9 code=0x7ffc0000 [ 324.436249][ T7541] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.448: corrupted in-inode xattr: e_value size too large [ 324.467639][ T28] audit: type=1326 audit(1770630430.707:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.2.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69d39aeb9 code=0x7ffc0000 [ 324.525676][ T28] audit: type=1326 audit(1770630430.747:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.2.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb69d39aeb9 code=0x7ffc0000 [ 324.548914][ T7541] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.448: couldn't read orphan inode 15 (err -117) [ 324.562723][ T28] audit: type=1326 audit(1770630430.747:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.2.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69d39aeb9 code=0x7ffc0000 [ 324.589686][ T7541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.894019][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.739673][ T7565] loop1: detected capacity change from 0 to 2048 [ 325.805314][ T7565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.886475][ T7565] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 325.923341][ T7565] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 325.940552][ T7565] EXT4-fs (loop1): This should not happen!! Data will be lost [ 325.940552][ T7565] [ 325.950711][ T7565] EXT4-fs (loop1): Total free blocks count 0 [ 325.957001][ T7565] EXT4-fs (loop1): Free/Dirty block details [ 325.963106][ T7565] EXT4-fs (loop1): free_blocks=66060288 [ 325.976962][ T7565] EXT4-fs (loop1): dirty_blocks=32 [ 325.982157][ T7565] EXT4-fs (loop1): Block reservation details [ 326.014731][ T7565] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 326.133286][ T1135] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16384 with max blocks 1 with error 28 [ 326.598242][ T8] hid-generic 0008:0007:0007.0002: unknown main item tag 0x3 [ 326.645255][ T8] hid-generic 0008:0007:0007.0002: hidraw0: HID v0.04 Device [syz0] on syz0 [ 326.747463][ T7581] loop0: detected capacity change from 0 to 512 [ 326.829471][ T7581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.941014][ T7580] fido_id[7580]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 327.114283][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.877658][ T7608] loop2: detected capacity change from 0 to 256 [ 329.950244][ T7608] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 330.547600][ T7602] loop0: detected capacity change from 0 to 40427 [ 330.585580][ T7602] F2FS-fs (loop0): invalid crc value [ 330.625571][ T7602] F2FS-fs (loop0): Found nat_bits in checkpoint [ 330.816413][ T7602] F2FS-fs (loop0): Start checkpoint disabled! [ 330.875793][ T7602] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 334.146046][ T5774] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 334.348387][ T5774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 334.365994][ T5774] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 334.397802][ T5774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.425256][ T5774] usb 1-1: config 0 descriptor?? [ 334.441448][ T7651] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 334.559733][ T7649] loop3: detected capacity change from 0 to 40427 [ 334.611947][ T7649] F2FS-fs (loop3): invalid crc value [ 334.646810][ T7649] F2FS-fs (loop3): Found nat_bits in checkpoint [ 334.765274][ T7649] F2FS-fs (loop3): Start checkpoint disabled! [ 334.787211][ T7649] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 334.932581][ T5774] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 335.103528][ T1190] usb 1-1: USB disconnect, device number 4 [ 335.163810][ T7654] fido_id[7654]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 335.238953][ T2954] kworker/u4:10: attempt to access beyond end of device [ 335.238953][ T2954] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 335.272589][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'. [ 335.282477][ T2954] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 335.295543][ T2954] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 335.314695][ T2954] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 335.459455][ T7658] loop2: detected capacity change from 0 to 2048 [ 335.504197][ T7658] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 335.577317][ T7658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.737898][ T7658] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #12: comm syz.2.494: corrupted inode contents [ 335.801986][ T7658] EXT4-fs error (device loop2): ext4_try_add_inline_entry:1336: inode #12: comm syz.2.494: mark_inode_dirty error [ 335.815264][ T7658] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #12: comm syz.2.494: corrupted inode contents [ 335.833082][ T7658] EXT4-fs error (device loop2): ext4_delete_inline_entry:1791: inode #12: comm syz.2.494: mark_inode_dirty error [ 335.846651][ T7658] EXT4-fs error (device loop2) in ext4_delete_inline_entry:1794: Corrupt filesystem [ 335.864313][ T7658] EXT4-fs warning (device loop2): ext4_rename_delete:3778: inode #12: comm syz.2.494: Deleting old file: nlink 2, error=-117 [ 335.884689][ T7658] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #12: comm syz.2.494: corrupted inode contents [ 335.931651][ T7658] EXT4-fs error (device loop2): ext4_rename:4030: inode #12: comm syz.2.494: mark_inode_dirty error [ 336.982264][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.171155][ T7669] loop1: detected capacity change from 0 to 40427 [ 337.216902][ T7669] F2FS-fs (loop1): build fault injection attr: rate: 174, type: 0x7ffff [ 337.504880][ T28] audit: type=1326 audit(1770630443.837:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abef9aeb9 code=0x7ffc0000 [ 337.551178][ T28] audit: type=1326 audit(1770630443.837:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abef9aeb9 code=0x7ffc0000 [ 337.625909][ T28] audit: type=1326 audit(1770630443.867:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4abef9aeb9 code=0x7ffc0000 [ 339.376007][ T28] audit: type=1326 audit(1770630443.867:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abef9aeb9 code=0x7ffc0000 [ 339.478265][ T28] audit: type=1326 audit(1770630443.867:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abef9aeb9 code=0x7ffc0000 [ 339.536036][ T28] audit: type=1326 audit(1770630443.867:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4abef9aeb9 code=0x7ffc0000 [ 339.559289][ T28] audit: type=1326 audit(1770630443.867:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abef9aeb9 code=0x7ffc0000 [ 339.609799][ T28] audit: type=1326 audit(1770630443.867:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.1.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4abef9aeb9 code=0x7ffc0000 [ 339.745483][ T7692] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 339.851363][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.173122][ T7698] loop1: detected capacity change from 0 to 4096 [ 340.186875][ T7698] EXT4-fs: Ignoring removed mblk_io_submit option [ 340.282564][ T7698] EXT4-fs (loop1): Test dummy encryption mode enabled [ 340.324643][ T7698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 340.605189][ T7702] loop2: detected capacity change from 0 to 1024 [ 340.619978][ T7703] loop0: detected capacity change from 0 to 1024 [ 340.632351][ T7702] EXT4-fs: Ignoring removed i_version option [ 340.643532][ T7702] EXT4-fs: Ignoring removed i_version option [ 340.652889][ T7703] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 340.672947][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.774994][ T7702] EXT4-fs: inline encryption not supported [ 340.829316][ T7702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 340.879005][ T7703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.938461][ T7702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.332345][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.730959][ T7714] loop2: detected capacity change from 0 to 256 [ 341.886055][ T7714] loop2: detected capacity change from 256 to 0 [ 341.932071][ T7715] syz.2.513: attempt to access beyond end of device [ 341.932071][ T7715] loop2: rw=0, sector=20, nr_sectors = 4 limit=0 [ 341.986250][ T7715] FAT-fs (loop2): Directory bread(block 5) failed [ 342.014309][ T7715] syz.2.513: attempt to access beyond end of device [ 342.014309][ T7715] loop2: rw=0, sector=20, nr_sectors = 4 limit=0 [ 342.075958][ T7715] FAT-fs (loop2): Directory bread(block 5) failed [ 342.082827][ T7715] syz.2.513: attempt to access beyond end of device [ 342.082827][ T7715] loop2: rw=0, sector=20, nr_sectors = 4 limit=0 [ 342.145934][ T7715] FAT-fs (loop2): Directory bread(block 5) failed [ 342.219225][ T5779] syz-executor: attempt to access beyond end of device [ 342.219225][ T5779] loop2: rw=0, sector=20, nr_sectors = 4 limit=0 [ 342.266428][ T7703] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 342.280671][ T5779] FAT-fs (loop2): Directory bread(block 5) failed [ 342.383279][ T7719] loop1: detected capacity change from 0 to 512 [ 342.412030][ T6954] syz.2.272: attempt to access beyond end of device [ 342.412030][ T6954] loop2: rw=0, sector=0, nr_sectors = 4 limit=0 [ 342.433265][ T6954] FAT-fs (loop2): unable to read boot sector to mark fs as dirty [ 342.483559][ T7719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.624094][ T7719] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.690496][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.859660][ T7730] 9pnet_fd: Insufficient options for proto=fd [ 342.871055][ T7731] loop3: detected capacity change from 0 to 256 [ 342.979178][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.088872][ T7733] loop0: detected capacity change from 0 to 256 [ 343.105364][ T7731] FAT-fs (loop3): Directory bread(block 64) failed [ 343.138217][ T7731] FAT-fs (loop3): Directory bread(block 65) failed [ 343.160495][ T7731] FAT-fs (loop3): Directory bread(block 66) failed [ 343.176447][ T7731] FAT-fs (loop3): Directory bread(block 67) failed [ 343.183283][ T7731] FAT-fs (loop3): Directory bread(block 68) failed [ 343.251322][ T1141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.276486][ T7731] FAT-fs (loop3): Directory bread(block 69) failed [ 343.283220][ T7731] FAT-fs (loop3): Directory bread(block 70) failed [ 344.877246][ T7731] FAT-fs (loop3): Directory bread(block 71) failed [ 344.884064][ T7731] FAT-fs (loop3): Directory bread(block 72) failed [ 344.934037][ T7731] FAT-fs (loop3): Directory bread(block 73) failed [ 345.243548][ T1141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.542411][ T1141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.628144][ T1141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.809541][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.830895][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.847297][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.855619][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.866113][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 345.873813][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 346.820943][ T7767] loop0: detected capacity change from 0 to 128 [ 346.876244][ T7767] EXT4-fs (loop0): Test dummy encryption mode enabled [ 346.947730][ T7767] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 347.060311][ T7767] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 347.232138][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 347.731355][ T7788] loop0: detected capacity change from 0 to 512 [ 347.936028][ T5784] Bluetooth: hci2: command tx timeout [ 348.359384][ T7788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.699520][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.928095][ T7792] loop0: detected capacity change from 0 to 512 [ 348.961343][ T7792] EXT4-fs: Ignoring removed mblk_io_submit option [ 348.974926][ T7747] chnl_net:caif_netlink_parms(): no params data found [ 349.004808][ T7792] EXT4-fs: inline encryption not supported [ 349.013411][ T7792] EXT4-fs: Ignoring removed mblk_io_submit option [ 349.075549][ T7792] EXT4-fs (loop0): Test dummy encryption mode enabled [ 349.107216][ T7792] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 349.156099][ T7792] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 349.229438][ T7792] EXT4-fs (loop0): 1 truncate cleaned up [ 349.251785][ T7792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.303358][ T7792] EXT4-fs (loop0): shut down requested (0) [ 349.359342][ T7803] 9pnet_fd: Insufficient options for proto=fd [ 349.606717][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.007287][ T5784] Bluetooth: hci2: command tx timeout [ 352.023430][ T7747] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.045553][ T7747] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.053249][ T7747] bridge_slave_0: entered allmulticast mode [ 352.062933][ T7747] bridge_slave_0: entered promiscuous mode [ 352.086364][ T5784] Bluetooth: hci2: command tx timeout [ 352.096720][ T1141] hsr_slave_0: left promiscuous mode [ 352.103702][ T1141] hsr_slave_1: left promiscuous mode [ 352.111196][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.119489][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.134316][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.145433][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.156815][ T1141] bridge_slave_1: left allmulticast mode [ 352.162676][ T1141] bridge_slave_1: left promiscuous mode [ 352.175281][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.198265][ T1141] bridge_slave_0: left allmulticast mode [ 352.204825][ T1141] bridge_slave_0: left promiscuous mode [ 352.218939][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.265666][ T1141] veth1_macvtap: left promiscuous mode [ 352.272135][ T1141] veth0_macvtap: left promiscuous mode [ 352.279739][ T1141] veth1_vlan: left promiscuous mode [ 352.286269][ T1141] veth0_vlan: left promiscuous mode [ 353.298762][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 353.393139][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 353.477189][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.579560][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.166216][ T5784] Bluetooth: hci2: command tx timeout [ 354.224037][ T1141] bond0 (unregistering): Released all slaves [ 354.439482][ T7747] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.452306][ T7747] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.479227][ T7747] bridge_slave_1: entered allmulticast mode [ 354.510932][ T7747] bridge_slave_1: entered promiscuous mode [ 354.641073][ T7747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.705295][ T7747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.751551][ T7747] team0: Port device team_slave_0 added [ 354.809639][ T7747] team0: Port device team_slave_1 added [ 354.854398][ T7747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.862273][ T7747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.899780][ T7747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.935794][ T7747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.943997][ T7747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.973385][ T7747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.036489][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 355.094541][ T7747] hsr_slave_0: entered promiscuous mode [ 355.110815][ T7747] hsr_slave_1: entered promiscuous mode [ 355.118442][ T7747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.137802][ T7747] Cannot create hsr debugfs directory [ 355.258003][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 355.289790][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.326037][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.336427][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 355.345792][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.364447][ T9] usb 2-1: config 0 descriptor?? [ 355.841478][ T9] wacom 0003:056A:0059.0004: hidraw0: USB HID v0.00 Device [HID 056a:0059] on usb-dummy_hcd.1-1/input0 [ 355.963418][ T7747] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 355.993626][ T7747] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 356.024718][ T5837] usb 2-1: USB disconnect, device number 4 [ 356.054835][ T7747] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 356.093283][ T7747] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 356.321406][ T7747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.372070][ T7747] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.394173][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.401482][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.442224][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.449679][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.065953][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 357.222595][ T7747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.274739][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 357.317127][ T7882] 9pnet_fd: Insufficient options for proto=fd [ 357.327487][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.352846][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 357.378687][ T9] usb 2-1: SerialNumber: syz [ 357.616112][ T9] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 357.648331][ T9] usb 2-1: USB disconnect, device number 5 [ 357.826346][ T8] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 357.849470][ T5811] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 357.895040][ T7747] veth0_vlan: entered promiscuous mode [ 357.925341][ T7747] veth1_vlan: entered promiscuous mode [ 357.996670][ T7747] veth0_macvtap: entered promiscuous mode [ 358.008641][ T7747] veth1_macvtap: entered promiscuous mode [ 358.025249][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 358.043792][ T8] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 358.051874][ T7747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.065691][ T7747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.070588][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.083816][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 358.091925][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.092802][ T7747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.112283][ T8] usb 4-1: config 0 descriptor?? [ 358.120127][ T5811] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 358.133280][ T7747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.149363][ T7890] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 358.153104][ T5811] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 358.169925][ T7747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.187180][ T7747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.204039][ T7747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.211982][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.244984][ T7747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.271850][ T5811] usb 1-1: config 0 descriptor?? [ 358.282420][ T7747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.297782][ T7747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.310735][ T7747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.324443][ T7747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.342707][ T7747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.374275][ T7747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.414378][ T7747] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.433112][ T7747] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.443672][ T7747] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.458393][ T7747] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.641592][ T8] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 358.740562][ T5811] HID 045e:07da: Invalid code 65791 type 1 [ 358.753575][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.783562][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.813900][ T5811] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0006/input/input11 [ 358.837832][ T8] usb 4-1: USB disconnect, device number 7 [ 358.907408][ T7906] fido_id[7906]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 358.969819][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.978024][ T5811] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 358.991226][ T6317] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 359.013304][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.029928][ T5811] usb 1-1: USB disconnect, device number 5 [ 359.201408][ T6317] usb 2-1: Using ep0 maxpacket: 16 [ 359.220476][ T6317] usb 2-1: config 0 has no interfaces? [ 359.245158][ T6317] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 359.275688][ T6317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 359.304422][ T6317] usb 2-1: Product: syz [ 359.313656][ T7911] fido_id[7911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 359.328605][ T6317] usb 2-1: Manufacturer: syz [ 359.333355][ T6317] usb 2-1: SerialNumber: syz [ 359.358451][ T6317] r8152-cfgselector 2-1: config 0 descriptor?? [ 359.662143][ T6317] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 360.156880][ T6317] usb 2-1: USB disconnect, device number 6 [ 360.467720][ T7926] syzkaller0: entered promiscuous mode [ 360.502352][ T7926] syzkaller0: entered allmulticast mode [ 360.693206][ T7930] Unsupported ieee802154 address type: 0 [ 361.110015][ T7940] 9pnet_fd: Insufficient options for proto=fd [ 361.426319][ T5837] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 361.837668][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.050718][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.115120][ T5837] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 362.139873][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.174465][ T5837] usb 4-1: config 0 descriptor?? [ 363.097886][ T7956] xt_CT: No such helper "snmp_trap" [ 363.136655][ T5837] elo 0003:04E7:0030.0007: item fetching failed at offset 5/7 [ 363.145735][ T5837] elo 0003:04E7:0030.0007: parse failed [ 363.252329][ T5837] elo: probe of 0003:04E7:0030.0007 failed with error -22 [ 363.354168][ T5837] usb 4-1: USB disconnect, device number 8 [ 363.585359][ T7935] loop4: detected capacity change from 0 to 40427 [ 363.842179][ T7935] F2FS-fs (loop4): Found nat_bits in checkpoint [ 363.939791][ T7975] binder: 7967:7975 unknown command 1074553619 [ 363.946402][ T7975] binder: 7967:7975 ioctl c0306201 2000000001c0 returned -22 [ 364.805954][ T5837] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 364.998239][ T5837] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.089865][ T5837] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 365.113913][ T5837] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 365.986029][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 365.994114][ T5837] usb 1-1: SerialNumber: syz [ 366.292392][ T5837] usb 1-1: 0:2 : does not exist [ 366.368452][ T7993] loop1: detected capacity change from 0 to 256 [ 366.396522][ T7993] exfat: Deprecated parameter 'utf8' [ 366.402032][ T7993] exfat: Deprecated parameter 'utf8' [ 366.416807][ T5837] usb 1-1: USB disconnect, device number 6 [ 366.441815][ T7993] exfat: Deprecated parameter 'namecase' [ 366.474705][ T7995] 9pnet_fd: Insufficient options for proto=fd [ 366.629960][ T7993] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 366.703847][ T5786] udevd[5786]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.381717][ T8015] loop4: detected capacity change from 0 to 256 [ 367.481471][ T8015] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x6f4cd389, utbl_chksum : 0xe619d30d) [ 367.597454][ T7993] bridge0: port 3(syz_tun) entered disabled state [ 368.056528][ T7993] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.487088][ T8039] loop0: detected capacity change from 0 to 40427 [ 370.613613][ T8039] F2FS-fs (loop0): invalid crc value [ 371.006668][ T8039] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 371.554420][ T8046] loop4: detected capacity change from 0 to 1024 [ 371.671577][ T8046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 371.696892][ T8046] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.860100][ T8046] EXT4-fs error (device loop4): ext4_free_blocks:6692: comm syz.4.573: Freeing blocks not in datazone - block = 0, count = 16 [ 372.043703][ T7747] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 372.147894][ T8053] 9pnet_fd: Insufficient options for proto=fd [ 372.314890][ T8055] loop4: detected capacity change from 0 to 512 [ 372.347591][ T8055] EXT4-fs: Ignoring removed bh option [ 372.378878][ T8055] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 372.510634][ T8060] loop3: detected capacity change from 0 to 512 [ 372.645203][ T8060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.968704][ T8055] EXT4-fs (loop4): 1 truncate cleaned up [ 373.310872][ T8055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.470860][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.831022][ T8077] loop3: detected capacity change from 0 to 16 [ 373.863048][ T8077] erofs: (device loop3): mounted with root inode @ nid 36. [ 373.916272][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 373.971904][ T5784] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 374.017535][ T8077] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096] [ 374.136831][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 374.166539][ T23] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 374.174811][ T23] usb 1-1: config 0 has no interface number 0 [ 374.202395][ T23] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 374.213511][ T7993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.227318][ T23] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 374.256618][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.275348][ T23] usb 1-1: Product: syz [ 374.286763][ T23] usb 1-1: Manufacturer: syz [ 374.297619][ T23] usb 1-1: SerialNumber: syz [ 374.309835][ T23] usb 1-1: config 0 descriptor?? [ 374.327153][ T8069] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 374.403932][ T7993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.483255][ T8082] loop3: detected capacity change from 0 to 256 [ 374.545730][ T8082] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 374.561682][ T8069] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 374.637647][ T7747] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.269754][ T7993] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.289180][ T7993] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.299940][ T7993] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.313321][ T7993] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.413627][ T23] asix 1-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 204 [ 375.600689][ T7993] syz.1.565 (7993) used greatest stack depth: 20328 bytes left [ 375.613165][ T8088] netlink: 44 bytes leftover after parsing attributes in process `syz.3.586'. [ 375.637364][ T8090] netlink: 44 bytes leftover after parsing attributes in process `syz.3.586'. [ 376.369161][ T8104] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 376.376513][ T8104] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 376.383226][ T8104] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 376.393937][ T8104] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 376.408059][ T8104] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 376.418865][ T8104] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 376.595049][ T8135] loop4: detected capacity change from 0 to 512 [ 376.614993][ T8135] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 376.666373][ T8135] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 376.709148][ T8135] EXT4-fs (loop4): orphan cleanup on readonly fs [ 376.724687][ T8135] EXT4-fs error (device loop4): ext4_orphan_get:1424: comm syz.4.591: bad orphan inode 267 [ 376.747311][ T8135] EXT4-fs (loop4): Remounting filesystem read-only [ 376.755410][ T8135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 376.775708][ T8135] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.591: dx entry: limit 0 != root limit 125 [ 376.791185][ T8135] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.591: Corrupt directory, running e2fsck is recommended [ 376.874570][ T7747] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 378.385259][ T8148] loop1: detected capacity change from 0 to 512 [ 378.403188][ T5784] Bluetooth: hci0: command 0x0c1a tx timeout [ 378.415958][ T5784] Bluetooth: hci2: command 0x0c1a tx timeout [ 378.422170][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 378.428361][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 378.506495][ T8097] usb 1-1: USB disconnect, device number 7 [ 378.809352][ T6060] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 379.719064][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.719187][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.534821][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 382.208090][ T8183] xt_CT: No such helper "snmp_trap" [ 382.501084][ T8192] loop0: detected capacity change from 0 to 512 [ 382.534258][ T8194] loop3: detected capacity change from 0 to 1024 [ 382.564305][ T8194] EXT4-fs: inline encryption not supported [ 382.571461][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 382.585447][ T8194] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 382.689316][ T8198] loop4: detected capacity change from 0 to 512 [ 382.740923][ T8198] EXT4-fs: Ignoring removed orlov option [ 382.756147][ T8194] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 382.809349][ T8198] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 382.851857][ T8192] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.603: pblk 19 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 383.337900][ T8192] EXT4-fs error (device loop0): ext4_quota_enable:7143: comm syz.0.603: Bad quota inode: 4, type: 1 [ 383.502003][ T8198] EXT4-fs (loop4): 1 orphan inode deleted [ 383.645766][ T8192] EXT4-fs warning (device loop0): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 383.646317][ T8198] EXT4-fs (loop4): 1 truncate cleaned up [ 383.672984][ T8198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.706636][ T8192] EXT4-fs (loop0): mount failed [ 383.894592][ T8198] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 384.018220][ T8198] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 384.083247][ T8198] overlayfs: failed to verify upper root origin [ 384.152713][ T8225] loop1: detected capacity change from 0 to 256 [ 384.198184][ T8225] exfat: Deprecated parameter 'utf8' [ 384.222686][ T8225] exfat: Deprecated parameter 'utf8' [ 384.244246][ T7747] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.284827][ T8225] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 384.570599][ T8235] loop0: detected capacity change from 0 to 256 [ 385.859056][ T8243] loop0: detected capacity change from 0 to 8192 [ 386.630875][ T8252] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 386.678346][ T8252] FAT-fs (loop0): Filesystem has been set read-only [ 387.571309][ T8105] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 388.231292][ T8105] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 388.277213][ T8105] usb 5-1: config 0 has no interface number 0 [ 388.333208][ T8105] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 388.446185][ T8105] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 388.498769][ T8105] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.592184][ T8105] usb 5-1: Product: syz [ 388.673563][ T8105] usb 5-1: Manufacturer: syz [ 388.967575][ T8105] usb 5-1: SerialNumber: syz [ 389.145363][ T8105] usb 5-1: config 0 descriptor?? [ 389.335625][ T8260] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 389.364890][ T8281] loop0: detected capacity change from 0 to 512 [ 389.381062][ T8281] EXT4-fs: Ignoring removed i_version option [ 389.388390][ T8281] EXT4-fs: Ignoring removed bh option [ 389.501144][ T8105] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, de:d0:23:0b:f0:f4 [ 389.517024][ T8281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.545611][ T8281] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 389.716307][ T8281] EXT4-fs (loop0): shut down requested (0) [ 389.771676][ T8293] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.622: iget: bad i_size value: 2533274857506816 [ 389.881671][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.131201][ T8298] loop0: detected capacity change from 0 to 512 [ 390.143602][ T8298] EXT4-fs: Ignoring removed mblk_io_submit option [ 390.159539][ T8298] EXT4-fs: inline encryption not supported [ 390.166756][ T8298] EXT4-fs: Ignoring removed mblk_io_submit option [ 390.188991][ T8298] EXT4-fs (loop0): Test dummy encryption mode enabled [ 390.202037][ T8298] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 390.219481][ T8298] EXT4-fs (loop0): 1 truncate cleaned up [ 390.229343][ T8298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.356134][ T8100] usb 5-1: USB disconnect, device number 2 [ 391.363535][ T8100] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 391.513729][ T28] audit: type=1800 audit(1770630497.847:30): pid=8304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.626" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 391.601208][ T28] audit: type=1800 audit(1770630497.847:31): pid=8309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.626" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 391.686350][ T8320] loop4: detected capacity change from 0 to 256 [ 391.717728][ T8302] loop1: detected capacity change from 0 to 8192 [ 391.777843][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.742582][ T8320] FAT-fs (loop4): Directory bread(block 64) failed [ 392.765918][ T8320] FAT-fs (loop4): Directory bread(block 65) failed [ 392.772684][ T8320] FAT-fs (loop4): Directory bread(block 66) failed [ 392.827631][ T8320] FAT-fs (loop4): Directory bread(block 67) failed [ 392.835588][ T8320] FAT-fs (loop4): Directory bread(block 68) failed [ 392.933434][ T8320] FAT-fs (loop4): Directory bread(block 69) failed [ 392.962519][ T8320] FAT-fs (loop4): Directory bread(block 70) failed [ 392.990238][ T8320] FAT-fs (loop4): Directory bread(block 71) failed [ 393.018283][ T8320] FAT-fs (loop4): Directory bread(block 72) failed [ 393.024935][ T8320] FAT-fs (loop4): Directory bread(block 73) failed [ 394.049437][ T8343] loop1: detected capacity change from 0 to 128 [ 394.088742][ T8343] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 394.199584][ T8343] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 394.353462][ T8349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.634'. [ 394.373860][ T8348] loop3: detected capacity change from 0 to 256 [ 394.450545][ T8348] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 394.696352][ T8105] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 395.629943][ T8105] usb 5-1: Using ep0 maxpacket: 32 [ 395.638700][ T8105] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 395.647213][ T8105] usb 5-1: config 0 has no interface number 0 [ 395.654244][ T8105] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 395.670604][ T8105] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 395.715959][ T8105] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.724251][ T8105] usb 5-1: Product: syz [ 395.760611][ T8105] usb 5-1: Manufacturer: syz [ 395.765303][ T8105] usb 5-1: SerialNumber: syz [ 395.786112][ T8105] usb 5-1: config 0 descriptor?? [ 395.826657][ T8352] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 396.054392][ T8352] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 396.226871][ T8098] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 396.657091][ T8098] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.008656][ T8098] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.262341][ T8098] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 397.354161][ T8098] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 397.437826][ T8098] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 397.495850][ T8098] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 397.504303][ T8098] usb 4-1: SerialNumber: syz [ 397.627448][ T8105] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 397.656721][ T8105] asix: probe of 5-1:0.188 failed with error -71 [ 397.684006][ T8105] usb 5-1: USB disconnect, device number 3 [ 397.726287][ T8401] loop0: detected capacity change from 0 to 2048 [ 397.776872][ T8098] usb 4-1: 0:2 : does not exist [ 397.781934][ T8098] usb 4-1: unit 5 not found! [ 397.809726][ T8401] loop0: p1 p2 p3 [ 397.831108][ T8401] loop0: p3 start 8388352 is beyond EOD, truncated [ 397.843370][ T8098] usb 4-1: USB disconnect, device number 9 [ 397.956356][ T5786] udevd[5786]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.090299][ T8408] loop1: detected capacity change from 0 to 128 [ 398.108502][ T8408] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 398.179151][ T8408] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 398.492370][ T5140] loop0: p1 p2 p3 [ 398.518164][ T5140] loop0: p3 start 8388352 is beyond EOD, truncated [ 401.108631][ T8429] loop4: detected capacity change from 0 to 512 [ 401.186226][ T8429] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 401.265036][ T8429] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 401.306318][ T8429] EXT4-fs (loop4): orphan cleanup on readonly fs [ 401.339763][ T8429] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.649: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 401.362623][ T8429] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.649: couldn't read orphan inode 13 (err -117) [ 401.397219][ T8429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 401.723657][ T8097] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 401.826944][ T8439] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 402.083942][ T8097] usb 4-1: config 0 has no interfaces? [ 402.091312][ T8097] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 402.152692][ T8097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.461563][ T8097] usb 4-1: config 0 descriptor?? [ 402.676098][ T8439] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (24564!=0) [ 403.713390][ T8449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.017064][ T7747] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.048459][ T8449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.220845][ T8431] syzkaller0: entered promiscuous mode [ 404.237546][ T8431] syzkaller0: entered allmulticast mode [ 404.281586][ T8453] loop0: detected capacity change from 0 to 128 [ 404.571943][ T8463] loop0: detected capacity change from 0 to 512 [ 404.585681][ T8099] usb 4-1: USB disconnect, device number 10 [ 404.628129][ T8463] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 404.700665][ T8466] loop4: detected capacity change from 0 to 128 [ 404.712192][ T8466] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 404.740021][ T8466] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 404.910235][ T8469] loop0: detected capacity change from 0 to 2048 [ 404.926805][ T8469] EXT4-fs: Ignoring removed i_version option [ 405.071794][ T8469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.121181][ T8469] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.355262][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.475149][ T8481] loop4: detected capacity change from 0 to 512 [ 405.539768][ T8481] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 405.589696][ T8481] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 405.638118][ T8481] EXT4-fs (loop4): orphan cleanup on readonly fs [ 405.660135][ T8486] loop0: detected capacity change from 0 to 256 [ 405.711031][ T8481] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.660: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 405.741189][ T8489] loop3: detected capacity change from 0 to 256 [ 405.781249][ T8489] exfat: Deprecated parameter 'utf8' [ 405.788764][ T8489] exfat: Deprecated parameter 'namecase' [ 405.794545][ T8489] exfat: Deprecated parameter 'utf8' [ 405.806259][ T8481] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.660: couldn't read orphan inode 13 (err -117) [ 405.846622][ T8486] FAT-fs (loop0): Directory bread(block 64) failed [ 405.865080][ T8481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 405.878437][ T8486] FAT-fs (loop0): Directory bread(block 65) failed [ 405.906975][ T8486] FAT-fs (loop0): Directory bread(block 66) failed [ 405.914010][ T8486] FAT-fs (loop0): Directory bread(block 67) failed [ 405.958743][ T8486] FAT-fs (loop0): Directory bread(block 68) failed [ 405.989282][ T8489] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 405.996630][ T8486] FAT-fs (loop0): Directory bread(block 69) failed [ 406.038667][ T8486] FAT-fs (loop0): Directory bread(block 70) failed [ 406.045296][ T8486] FAT-fs (loop0): Directory bread(block 71) failed [ 406.143716][ T8486] FAT-fs (loop0): Directory bread(block 72) failed [ 406.217476][ T8486] FAT-fs (loop0): Directory bread(block 73) failed [ 406.358966][ T8494] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 407.247548][ T7747] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.400929][ T8500] loop3: detected capacity change from 0 to 256 [ 407.458316][ T8500] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 407.487841][ T8500] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 407.539923][ T8503] loop4: detected capacity change from 0 to 512 [ 407.545703][ T8500] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 407.639299][ T8506] loop1: detected capacity change from 0 to 512 [ 407.689837][ T8503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.744523][ T8506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.861485][ T8506] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.890555][ T8506] EXT4-fs (loop1): shut down requested (0) [ 408.098086][ T7747] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.114373][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.490004][ T8531] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 409.001818][ T8548] loop3: detected capacity change from 0 to 512 [ 409.076440][ T8548] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 409.112099][ T8548] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 409.157415][ T8548] EXT4-fs (loop3): orphan cleanup on readonly fs [ 409.195404][ T8548] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.672: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 409.307764][ T8548] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.672: couldn't read orphan inode 13 (err -117) [ 409.338739][ T8548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 409.762945][ T8562] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 410.437520][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.130219][ T8573] loop4: detected capacity change from 0 to 40427 [ 413.164544][ T8573] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(32767) [ 413.196054][ T8573] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 413.220550][ T8573] F2FS-fs (loop4): invalid crc value [ 413.332100][ T8573] F2FS-fs (loop4): Found nat_bits in checkpoint [ 413.361986][ T8595] loop1: detected capacity change from 0 to 256 [ 413.542760][ T8595] FAT-fs (loop1): Directory bread(block 64) failed [ 413.578006][ T8595] FAT-fs (loop1): Directory bread(block 65) failed [ 413.584747][ T8595] FAT-fs (loop1): Directory bread(block 66) failed [ 413.625987][ T8595] FAT-fs (loop1): Directory bread(block 67) failed [ 413.632727][ T8595] FAT-fs (loop1): Directory bread(block 68) failed [ 413.696008][ T8595] FAT-fs (loop1): Directory bread(block 69) failed [ 413.702999][ T8595] FAT-fs (loop1): Directory bread(block 70) failed [ 413.758134][ T8595] FAT-fs (loop1): Directory bread(block 71) failed [ 413.781572][ T8595] FAT-fs (loop1): Directory bread(block 72) failed [ 413.794541][ T8595] FAT-fs (loop1): Directory bread(block 73) failed [ 414.463172][ T8613] loop1: detected capacity change from 0 to 1024 [ 414.489930][ T8613] EXT4-fs: Ignoring removed nomblk_io_submit option [ 414.538259][ T8613] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 414.608722][ T8613] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 414.673253][ T8613] System zones: 0-1, 3-36 [ 414.749005][ T8613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.933393][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.112721][ T8635] loop4: detected capacity change from 0 to 512 [ 416.179261][ T8635] EXT4-fs: Ignoring removed mblk_io_submit option [ 416.199994][ T8635] EXT4-fs: inline encryption not supported [ 416.235116][ T8635] EXT4-fs: Ignoring removed mblk_io_submit option [ 416.418906][ T8635] EXT4-fs (loop4): Test dummy encryption mode enabled [ 416.445969][ T8635] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 416.477727][ T8635] EXT4-fs (loop4): 1 truncate cleaned up [ 416.485026][ T8635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.105965][ T8097] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 418.206030][ T8660] 9pnet_fd: Insufficient options for proto=fd [ 418.260703][ T7747] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.331727][ T8097] usb 2-1: config 0 has no interfaces? [ 418.339206][ T8097] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 418.376170][ T8097] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.436137][ T8097] usb 2-1: config 0 descriptor?? [ 418.551554][ T8669] loop3: detected capacity change from 0 to 128 [ 418.592499][ T8669] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 418.637441][ T8669] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 418.792371][ T8657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.813903][ T8657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.897442][ T8657] syzkaller0: entered promiscuous mode [ 418.911187][ T8657] syzkaller0: entered allmulticast mode [ 419.321494][ T8673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.694'. [ 419.883776][ T8684] loop3: detected capacity change from 0 to 256 [ 419.957299][ T8099] usb 2-1: USB disconnect, device number 7 [ 420.985148][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 420.996944][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 421.006227][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 421.016097][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 421.111282][ T8694] loop1: detected capacity change from 0 to 256 [ 421.193391][ T8694] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 422.476921][ T8703] 9pnet_fd: Insufficient options for proto=fd [ 422.789337][ T28] audit: type=1326 audit(1770630529.127:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056099aeb9 code=0x7ffc0000 [ 422.861642][ T28] audit: type=1326 audit(1770630529.127:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056099aeb9 code=0x7ffc0000 [ 422.940764][ T28] audit: type=1326 audit(1770630529.127:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f056099aeb9 code=0x7ffc0000 [ 423.003169][ T28] audit: type=1326 audit(1770630529.127:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056099aeb9 code=0x7ffc0000 [ 423.061164][ T28] audit: type=1326 audit(1770630529.127:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056099aeb9 code=0x7ffc0000 [ 423.109985][ T28] audit: type=1326 audit(1770630529.147:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f056095b78e code=0x7ffc0000 [ 423.207392][ T8105] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 423.224436][ T28] audit: type=1326 audit(1770630529.147:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056099aeb9 code=0x7ffc0000 [ 423.343899][ T28] audit: type=1326 audit(1770630529.147:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056099aeb9 code=0x7ffc0000 [ 423.405894][ T8105] usb 5-1: Using ep0 maxpacket: 8 [ 423.422453][ T8712] loop1: detected capacity change from 0 to 128 [ 423.433189][ T8105] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 423.465941][ T28] audit: type=1326 audit(1770630529.147:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f056099aeb9 code=0x7ffc0000 [ 423.474018][ T8105] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 423.512299][ T8712] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 423.565984][ T28] audit: type=1326 audit(1770630529.147:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056099aeb9 code=0x7ffc0000 [ 423.597327][ T8712] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 423.618462][ T8105] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 423.669823][ T8105] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 423.708596][ T8105] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.758134][ T8105] usb 5-1: Product: syz [ 423.780304][ T8105] usb 5-1: Manufacturer: syz [ 423.796094][ T8105] usb 5-1: SerialNumber: syz [ 423.827522][ T8105] usb 5-1: config 0 descriptor?? [ 424.486555][ T8024] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 424.706512][ T8024] usb 2-1: Using ep0 maxpacket: 16 [ 424.736467][ T8024] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.758351][ T8024] usb 2-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 28 [ 424.799561][ T8024] usb 2-1: config 0 interface 0 has no altsetting 0 [ 424.821973][ T8024] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 424.845930][ T8024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.867645][ T8024] usb 2-1: config 0 descriptor?? [ 424.887321][ T8708] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 424.899176][ T8024] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 425.329924][ T8727] loop3: detected capacity change from 0 to 1024 [ 425.621033][ T8727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.727942][ T8732] x_tables: ip_tables: osf match: only valid for protocol 6 [ 426.633070][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.833131][ T8105] usb 5-1: USB disconnect, device number 4 [ 429.037930][ T8743] loop1: detected capacity change from 0 to 512 [ 429.136500][ T8743] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 429.155523][ T8743] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 429.181255][ T8024] usb 2-1: USB disconnect, device number 8 [ 429.196743][ T8743] EXT4-fs (loop1): orphan cleanup on readonly fs [ 429.252641][ T8743] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.713: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 429.352464][ T8743] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.713: couldn't read orphan inode 13 (err -117) [ 429.416561][ T8743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 429.766251][ T8746] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 430.714668][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.185580][ T8752] loop1: detected capacity change from 0 to 512 [ 431.217947][ T8752] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 431.252530][ T8752] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 431.278860][ T8752] EXT4-fs (loop1): orphan cleanup on readonly fs [ 431.290092][ T8752] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.717: bad orphan inode 267 [ 431.308141][ T8752] EXT4-fs (loop1): Remounting filesystem read-only [ 431.322405][ T8752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 431.342130][ T8752] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.717: dx entry: limit 0 != root limit 125 [ 431.355397][ T8752] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.717: Corrupt directory, running e2fsck is recommended [ 431.403309][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 431.899334][ T8099] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 432.024036][ T8763] loop1: detected capacity change from 0 to 128 [ 432.032572][ T8763] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 432.059827][ T8763] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 432.128685][ T8099] usb 4-1: Using ep0 maxpacket: 16 [ 432.167543][ T8099] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 432.188061][ T8099] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 432.239721][ T8099] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.273252][ T8099] usb 4-1: config 1 interface 0 has no altsetting 0 [ 432.303971][ T8099] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 432.338214][ T8099] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.353543][ T8099] usb 4-1: Product: syz [ 432.362163][ T8099] usb 4-1: Manufacturer: syz [ 432.375095][ T8099] usb 4-1: SerialNumber: syz [ 432.480166][ T8767] loop0: detected capacity change from 0 to 512 [ 432.573427][ T8767] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 432.624654][ T8767] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 432.634110][ T8767] EXT4-fs (loop0): orphan cleanup on readonly fs [ 432.695644][ T8099] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 432.710044][ T8767] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.723: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 432.834328][ T8767] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.723: couldn't read orphan inode 13 (err -117) [ 432.849987][ T8767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 433.090711][ T8105] usb 4-1: USB disconnect, device number 11 [ 433.128606][ T8105] usblp0: removed [ 433.225736][ T8779] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 433.926607][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.072908][ T8806] loop1: detected capacity change from 0 to 128 [ 437.107625][ T8806] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 437.176022][ T8806] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 437.251407][ T8813] loop0: detected capacity change from 0 to 256 [ 437.348993][ T8815] loop3: detected capacity change from 0 to 512 [ 437.357701][ T8813] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 437.392258][ T8813] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 437.397751][ T8815] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 437.492164][ T8815] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 437.501350][ T8815] EXT4-fs (loop3): orphan cleanup on readonly fs [ 437.511351][ T8815] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.734: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 439.302521][ T8815] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.734: couldn't read orphan inode 13 (err -117) [ 439.335184][ T8815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 439.392167][ T8824] loop4: detected capacity change from 0 to 512 [ 439.421899][ T8824] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 439.725624][ T8826] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 440.521257][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.528286][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.653418][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.764832][ T8828] loop0: detected capacity change from 0 to 256 [ 440.815027][ T8828] exFAT-fs (loop0): error, The cluster chain has a loop [ 440.837429][ T8828] exFAT-fs (loop0): failed to count the number of clusters in root [ 440.851026][ T8828] exFAT-fs (loop0): failed to recognize exfat type [ 441.983853][ T8844] loop3: detected capacity change from 0 to 128 [ 442.013156][ T8844] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 442.089964][ T8844] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 442.439890][ T8849] loop3: detected capacity change from 0 to 512 [ 442.476013][ T8849] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 442.535206][ T8849] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 442.546226][ T8849] EXT4-fs (loop3): orphan cleanup on readonly fs [ 442.602127][ T8849] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.747: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 442.691260][ T8849] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.747: couldn't read orphan inode 13 (err -117) [ 442.750690][ T8849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 442.778167][ T8840] loop0: detected capacity change from 0 to 40427 [ 442.942514][ T8840] F2FS-fs (loop0): Image doesn't support compression [ 442.996141][ T8840] F2FS-fs (loop0): Unrecognized mount option "whint_mode=fs-based" or missing value [ 443.166202][ T8860] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 443.183635][ T8860] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (24564!=0) [ 443.444927][ T8846] loop4: detected capacity change from 0 to 40427 [ 443.518961][ T8846] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 443.562449][ T8846] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 443.625300][ T8846] F2FS-fs (loop4): invalid crc value [ 443.780818][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.130229][ T8846] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 444.136505][ T8105] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 444.149864][ T8846] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 444.328522][ T8105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 444.355859][ T8105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.375865][ T8105] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 444.390742][ T8105] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.406830][ T8105] usb 2-1: config 0 descriptor?? [ 444.487635][ T7747] syz-executor: attempt to access beyond end of device [ 444.487635][ T7747] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 444.504076][ T7747] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 444.640256][ T8872] loop3: detected capacity change from 0 to 512 [ 444.672507][ T8872] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 444.728026][ T8872] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003] [ 444.775451][ T8872] System zones: 1-2, 4-12, 8-8 [ 444.802986][ T8867] loop0: detected capacity change from 0 to 40427 [ 444.827284][ T8867] F2FS-fs (loop0): heap/no_heap options were deprecated [ 444.834805][ T8867] F2FS-fs (loop0): build fault injection attr: rate: 19, type: 0x7ffff [ 444.880777][ T8872] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.753: iget: bad i_size value: 38620345925642 [ 444.925080][ T8105] usbhid 2-1:0.0: can't add hid device: -71 [ 444.940530][ T8105] usbhid: probe of 2-1:0.0 failed with error -71 [ 444.949593][ T8872] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.753: couldn't read orphan inode 15 (err -117) [ 444.972785][ T8105] usb 2-1: USB disconnect, device number 9 [ 445.026820][ T8872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.208951][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.671181][ T8884] loop1: detected capacity change from 0 to 128 [ 445.704570][ T8884] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 445.783227][ T8884] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 446.093124][ T8892] loop3: detected capacity change from 0 to 512 [ 446.161833][ T8892] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 446.300508][ T8892] EXT4-fs (loop3): 1 truncate cleaned up [ 446.332808][ T8892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.446168][ T8899] loop0: detected capacity change from 0 to 256 [ 446.462188][ T8899] exfat: Deprecated parameter 'utf8' [ 446.468119][ T8899] exfat: Deprecated parameter 'namecase' [ 446.474571][ T8899] exfat: Deprecated parameter 'namecase' [ 446.480496][ T8899] exfat: Deprecated parameter 'utf8' [ 446.532317][ T8898] loop1: detected capacity change from 0 to 256 [ 446.547662][ T8898] exfat: Deprecated parameter 'utf8' [ 446.554096][ T8898] exfat: Deprecated parameter 'namecase' [ 446.741796][ T8898] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 446.891158][ T8899] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 447.246406][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 447.246425][ T28] audit: type=1800 audit(1770630553.577:50): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.760" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 447.528417][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.746296][ T8105] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 449.060272][ T8105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 449.076362][ T8105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.090142][ T8105] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 449.100954][ T8105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.127094][ T8105] usb 4-1: config 0 descriptor?? [ 449.172218][ T8925] loop4: detected capacity change from 0 to 128 [ 449.192864][ T8925] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 449.222499][ T8925] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 449.589144][ T8105] usbhid 4-1:0.0: can't add hid device: -71 [ 449.605172][ T8105] usbhid: probe of 4-1:0.0 failed with error -71 [ 449.620533][ T8105] usb 4-1: USB disconnect, device number 12 [ 449.952630][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.770'. [ 450.528431][ T8934] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 452.060990][ T8945] loop0: detected capacity change from 0 to 1024 [ 452.130699][ T8945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.343889][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.484596][ T8952] loop1: detected capacity change from 0 to 512 [ 452.631748][ T8957] loop0: detected capacity change from 0 to 256 [ 452.642808][ T8957] exfat: Deprecated parameter 'utf8' [ 452.648837][ T8957] exfat: Deprecated parameter 'namecase' [ 452.727415][ T8957] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 453.654926][ T8961] loop0: detected capacity change from 0 to 128 [ 453.684590][ T8961] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 453.776553][ T8961] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 454.082147][ T8965] loop0: detected capacity change from 0 to 128 [ 454.148261][ T8965] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 454.175521][ T8965] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 454.338267][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 454.866984][ T8100] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 455.068402][ T8100] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 455.095269][ T8100] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.120845][ T8100] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 455.145425][ T8100] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.185523][ T8100] usb 1-1: config 0 descriptor?? [ 455.626349][ T8100] usbhid 1-1:0.0: can't add hid device: -71 [ 455.656467][ T8100] usbhid: probe of 1-1:0.0 failed with error -71 [ 455.678661][ T8100] usb 1-1: USB disconnect, device number 8 [ 455.896619][ T8985] loop3: detected capacity change from 0 to 256 [ 455.904009][ T8985] exfat: Deprecated parameter 'utf8' [ 455.909583][ T8985] exfat: Deprecated parameter 'namecase' [ 457.449384][ T8985] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 458.022932][ T8991] 9pnet: Could not find request transport: fd0x0000000000000007 [ 458.679043][ T8998] loop0: detected capacity change from 0 to 512 [ 458.762043][ T8998] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 458.813415][ T8998] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 458.841879][ T8998] EXT4-fs (loop0): orphan cleanup on readonly fs [ 458.862596][ T8998] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.789: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 458.915496][ T8998] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.789: couldn't read orphan inode 13 (err -117) [ 458.964482][ T8998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 459.469896][ T9013] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (24564!=0) [ 459.974723][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.036067][ T9017] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.046728][ T9017] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.331973][ T9017] bridge0: entered allmulticast mode [ 460.415236][ T9020] bridge_slave_1: left allmulticast mode [ 460.471183][ T9020] bridge_slave_1: left promiscuous mode [ 460.518920][ T9020] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.611112][ T9020] bridge_slave_0: left allmulticast mode [ 461.637475][ T9020] bridge_slave_0: left promiscuous mode [ 461.645387][ T9020] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.506388][ T9035] loop0: detected capacity change from 0 to 256 [ 462.513727][ T9035] exfat: Deprecated parameter 'utf8' [ 462.519714][ T9035] exfat: Deprecated parameter 'namecase' [ 462.596552][ T9035] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 463.116800][ T9033] loop4: detected capacity change from 0 to 2048 [ 463.301595][ T9033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.382620][ T9042] 9pnet: Could not find request transport: fd0x0000000000000007 [ 463.549622][ T9032] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 463.607333][ T9032] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 463.642006][ T9049] 9pnet_fd: Insufficient options for proto=fd [ 463.649709][ T9032] EXT4-fs (loop4): This should not happen!! Data will be lost [ 463.649709][ T9032] [ 463.659788][ T9032] EXT4-fs (loop4): Total free blocks count 0 [ 463.668830][ T9032] EXT4-fs (loop4): Free/Dirty block details [ 463.683922][ T9032] EXT4-fs (loop4): free_blocks=2415919504 [ 463.689921][ T9032] EXT4-fs (loop4): dirty_blocks=16 [ 463.723427][ T9032] EXT4-fs (loop4): Block reservation details [ 463.755894][ T9032] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 464.058452][ T9053] loop1: detected capacity change from 0 to 256 [ 464.071415][ T9053] exfat: Deprecated parameter 'utf8' [ 464.077170][ T9053] exfat: Deprecated parameter 'namecase' [ 464.083544][ T9053] exfat: Deprecated parameter 'namecase' [ 464.089635][ T9053] exfat: Deprecated parameter 'utf8' [ 464.212049][ T9053] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 464.807563][ T7747] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.083278][ T9057] loop0: detected capacity change from 0 to 128 [ 465.171135][ T9059] loop1: detected capacity change from 0 to 256 [ 465.295667][ T9061] loop4: detected capacity change from 0 to 512 [ 465.348322][ T9061] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 465.387418][ T9061] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 465.407040][ T9061] EXT4-fs (loop4): orphan cleanup on readonly fs [ 465.415308][ T9061] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.804: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 465.456114][ T9061] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.804: couldn't read orphan inode 13 (err -117) [ 465.553716][ T9061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 467.260583][ T9070] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (24564!=0) [ 467.903235][ T9056] loop3: detected capacity change from 0 to 40427 [ 467.935496][ T9056] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 467.962737][ T9056] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 467.993746][ T9056] F2FS-fs (loop3): invalid crc value [ 468.848079][ T7747] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.021993][ T9086] 9pnet_fd: Insufficient options for proto=fd [ 469.095176][ T9089] loop3: detected capacity change from 0 to 128 [ 469.188364][ T9087] loop0: detected capacity change from 0 to 4096 [ 469.296325][ T9087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.550410][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.303388][ T8105] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 470.598132][ T8105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 470.633347][ T8105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.660476][ T8105] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 470.692972][ T8105] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.728204][ T8105] usb 2-1: config 0 descriptor?? [ 471.794590][ T8105] usbhid 2-1:0.0: can't add hid device: -71 [ 471.807125][ T8105] usbhid: probe of 2-1:0.0 failed with error -71 [ 471.832207][ T8105] usb 2-1: USB disconnect, device number 10 [ 472.686766][ T9114] 9pnet_fd: Insufficient options for proto=fd [ 472.848766][ T9116] loop3: detected capacity change from 0 to 4096 [ 472.864294][ T9116] EXT4-fs: Ignoring removed mblk_io_submit option [ 472.873254][ T9116] EXT4-fs: Ignoring removed orlov option [ 472.905961][ T8026] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 472.922475][ T9116] EXT4-fs (loop3): Test dummy encryption mode enabled [ 472.949806][ T9116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.035541][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.098050][ T8026] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 473.116087][ T8105] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 473.144977][ T8026] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 473.166078][ T8026] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 473.178491][ T8026] usb 1-1: SerialNumber: syz [ 473.398451][ T9123] loop4: detected capacity change from 0 to 2048 [ 473.418616][ T9123] EXT4-fs (loop4): bad block size 65536 [ 473.456095][ T8105] usb 2-1: Using ep0 maxpacket: 16 [ 473.465211][ T8026] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 473.494460][ T8105] usb 2-1: config 0 interface 0 has no altsetting 0 [ 473.534418][ T8105] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 473.619513][ T8105] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.984375][ T8105] usb 2-1: config 0 descriptor?? [ 474.208557][ T8026] usb 1-1: USB disconnect, device number 9 [ 474.619352][ T9118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.645155][ T9118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.662718][ T8105] hid (null): unknown global tag 0xc [ 474.875968][ T8026] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 474.893835][ T8105] hid (null): unknown global tag 0xc [ 474.928875][ T8105] usb 2-1: USB disconnect, device number 11 [ 475.170942][ T9129] loop0: detected capacity change from 0 to 40427 [ 475.195054][ T9129] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 475.247626][ T9129] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 475.296599][ T9129] F2FS-fs (loop0): invalid crc value [ 475.331929][ T9129] F2FS-fs (loop0): Found nat_bits in checkpoint [ 475.511797][ T9129] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 475.544552][ T9129] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 476.358625][ T9145] 9pnet_fd: Insufficient options for proto=fd [ 476.870287][ T8026] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 476.895999][ T8026] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.916133][ T8026] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 476.925359][ T8026] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.958994][ T8026] usb 4-1: config 0 descriptor?? [ 477.044426][ T9158] loop0: detected capacity change from 0 to 256 [ 478.287345][ T9166] loop0: detected capacity change from 0 to 512 [ 478.315438][ T9166] EXT4-fs: inline encryption not supported [ 478.342490][ T9166] EXT4-fs: Ignoring removed i_version option [ 478.376030][ T9166] EXT4-fs (loop0): Test dummy encryption mode enabled [ 478.404144][ T9166] EXT4-fs warning (device loop0): read_mmp_block:115: Error -74 while reading MMP block 17 [ 478.444876][ T8026] usbhid 4-1:0.0: can't add hid device: -71 [ 478.459054][ T8026] usbhid: probe of 4-1:0.0 failed with error -71 [ 478.472938][ T8026] usb 4-1: USB disconnect, device number 13 [ 478.828629][ T9173] 9pnet_fd: Insufficient options for proto=fd [ 478.855679][ T9175] loop3: detected capacity change from 0 to 128 [ 478.884452][ T9175] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 478.945903][ T9175] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 479.681864][ T9185] loop3: detected capacity change from 0 to 2048 [ 479.770054][ T9185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.987074][ T9185] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 480.017733][ T9190] loop1: detected capacity change from 0 to 256 [ 480.113751][ T9185] overlayfs: failed to verify origin (/bus, ino=18, err=-28) [ 480.167961][ T9185] overlayfs: failed to verify upper root origin [ 480.361981][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.580926][ T9193] loop1: detected capacity change from 0 to 1024 [ 480.589392][ T9193] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 480.716852][ T9193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.747670][ T9193] EXT4-fs warning (device loop1): empty_inline_dir:1856: bad inline directory (dir #12) - no `..' [ 481.952203][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.196126][ T6317] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 482.222429][ T9211] 9pnet_fd: Insufficient options for proto=fd [ 482.303968][ T9213] loop4: detected capacity change from 0 to 128 [ 482.317048][ T9213] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 482.343097][ T9213] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 482.389498][ T6317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 482.414826][ T6317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.447047][ T6317] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 482.481007][ T6317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.520549][ T6317] usb 4-1: config 0 descriptor?? [ 483.411354][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 483.755627][ T9232] loop4: detected capacity change from 0 to 1024 [ 483.803581][ T9232] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 483.931238][ T9232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.079213][ T9236] loop1: detected capacity change from 0 to 1024 [ 484.141099][ T9232] EXT4-fs warning (device loop4): empty_inline_dir:1856: bad inline directory (dir #12) - no `..' [ 484.163052][ T9236] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 484.300455][ T9236] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 2: comm syz.1.865: lblock 2 mapped to illegal pblock 2 (length 1) [ 484.392401][ T9236] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 484.418575][ T7747] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.436523][ T9236] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 48: comm syz.1.865: lblock 0 mapped to illegal pblock 48 (length 1) [ 484.548621][ T9236] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 484.618432][ T9236] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.865: Failed to acquire dquot type 0 [ 484.683398][ T9236] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 484.752866][ T9236] EXT4-fs error (device loop1): ext4_evict_inode:252: inode #11: comm syz.1.865: mark_inode_dirty error [ 484.803070][ T9239] loop4: detected capacity change from 0 to 128 [ 484.810894][ T9236] EXT4-fs warning (device loop1): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 484.849981][ T9239] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 484.868292][ T9236] EXT4-fs (loop1): 1 orphan inode deleted [ 484.899536][ T9236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.938299][ T9239] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 485.310695][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.344786][ T2954] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 485.365911][ T6317] usbhid 4-1:0.0: can't add hid device: -71 [ 485.372199][ T6317] usbhid: probe of 4-1:0.0 failed with error -71 [ 485.407927][ T2954] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 485.419106][ T6317] usb 4-1: USB disconnect, device number 14 [ 485.442324][ T2954] EXT4-fs error (device loop1): ext4_release_dquot:6985: comm kworker/u4:10: Failed to release dquot type 0 [ 485.502231][ T9243] input: syz1 as /devices/virtual/input/input14 [ 485.513058][ T9242] loop3: detected capacity change from 0 to 512 [ 485.519116][ T5769] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 485.554785][ T5769] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 485.578230][ T5769] EXT4-fs error (device loop1): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error [ 485.601171][ T9242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.653149][ T9242] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 485.874069][ T9253] loop1: detected capacity change from 0 to 512 [ 485.889842][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.904289][ T9253] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 485.969057][ T9253] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 485.986979][ T9253] EXT4-fs (loop1): orphan cleanup on readonly fs [ 486.006083][ T9253] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.868: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 486.095228][ T9253] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.868: couldn't read orphan inode 13 (err -117) [ 486.109845][ T9253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 486.262179][ T9260] loop0: detected capacity change from 0 to 128 [ 486.296223][ T8099] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 486.322298][ T9260] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 486.364252][ T9260] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 486.428371][ T9263] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 486.438868][ T9263] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (24564!=0) [ 486.567846][ T8099] usb 4-1: Using ep0 maxpacket: 8 [ 486.576025][ T8099] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 486.600614][ T8099] usb 4-1: config 179 has no interface number 0 [ 486.624157][ T8099] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 486.752627][ T8099] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 486.764228][ T8099] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 486.775468][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.800960][ T8099] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 486.843489][ T8099] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 486.861919][ T8099] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 486.873030][ T8099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.876334][ T6317] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 486.897911][ T9258] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 487.155670][ T9258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.165296][ T9258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.312142][ T6317] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 487.329217][ T6317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.339561][ T6317] usb 1-1: Product: syz [ 487.344003][ T6317] usb 1-1: Manufacturer: syz [ 487.351605][ T6317] usb 1-1: SerialNumber: syz [ 487.423307][ T9258] loop3: detected capacity change from 0 to 128 [ 487.511525][ T8098] usb 4-1: USB disconnect, device number 15 [ 487.511660][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 487.529556][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 488.324759][ T9278] loop3: detected capacity change from 0 to 512 [ 488.353007][ T9278] EXT4-fs: Ignoring removed nobh option [ 488.381770][ T9278] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 488.397630][ T6317] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 488.448598][ T9278] [ 488.451011][ T9278] ====================================================== [ 488.458086][ T9278] WARNING: possible circular locking dependency detected [ 488.465152][ T9278] syzkaller #0 Not tainted [ 488.469714][ T9278] ------------------------------------------------------ [ 488.477257][ T9278] syz.3.880/9278 is trying to acquire lock: [ 488.484202][ T9278] ffff888077e94bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 488.494492][ T9278] [ 488.494492][ T9278] but task is already holding lock: [ 488.501898][ T9278] ffff88805d44a8c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 488.511809][ T9278] [ 488.511809][ T9278] which lock already depends on the new lock. [ 488.511809][ T9278] [ 488.522329][ T9278] [ 488.522329][ T9278] the existing dependency chain (in reverse order) is: [ 488.531634][ T9278] [ 488.531634][ T9278] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 488.539347][ T9278] down_write+0x97/0x200 [ 488.544189][ T9278] ext4_destroy_inline_data+0x28/0xe0 [ 488.550223][ T9278] ext4_do_writepages+0x4f0/0x3990 [ 488.555911][ T9278] ext4_writepages+0x1dd/0x350 [ 488.561384][ T9278] do_writepages+0x3b3/0x630 [ 488.566592][ T9278] filemap_fdatawrite_wbc+0x122/0x180 [ 488.572607][ T9278] filemap_flush+0xe4/0x150 [ 488.577731][ T9278] ext4_convert_inline_data+0x18f/0x5f0 [ 488.583856][ T9278] ext4_fallocate+0xfb/0x1d80 [ 488.589112][ T9278] vfs_fallocate+0x58e/0x700 [ 488.594296][ T9278] do_vfs_ioctl+0x1a6d/0x1cc0 [ 488.599619][ T9278] __se_sys_ioctl+0x83/0x170 [ 488.604832][ T9278] do_syscall_64+0x55/0xa0 [ 488.609817][ T9278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.616361][ T9278] [ 488.616361][ T9278] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 488.624929][ T9278] __lock_acquire+0x2df1/0x7d40 [ 488.630367][ T9278] lock_acquire+0x19e/0x420 [ 488.635580][ T9278] percpu_down_read+0x44/0x1a0 [ 488.640911][ T9278] ext4_writepages+0x1a4/0x350 [ 488.646260][ T9278] do_writepages+0x3b3/0x630 [ 488.651511][ T9278] __writeback_single_inode+0x153/0xec0 [ 488.657650][ T9278] writeback_single_inode+0x21f/0x760 [ 488.663656][ T9278] write_inode_now+0x183/0x210 [ 488.669290][ T9278] iput+0x5ae/0x920 [ 488.673797][ T9278] ext4_xattr_block_set+0x273f/0x32b0 [ 488.679793][ T9278] ext4_expand_extra_isize_ea+0x12c5/0x1e80 [ 488.686286][ T9278] __ext4_expand_extra_isize+0x306/0x400 [ 488.692504][ T9278] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 488.698786][ T9278] ext4_evict_inode+0x7f3/0xea0 [ 488.704234][ T9278] evict+0x4ca/0x8d0 [ 488.708710][ T9278] ext4_orphan_cleanup+0xbec/0x1420 [ 488.714500][ T9278] ext4_fill_super+0x5ed3/0x6790 [ 488.720158][ T9278] get_tree_bdev+0x3f3/0x520 [ 488.725386][ T9278] vfs_get_tree+0x8c/0x280 [ 488.730474][ T9278] do_new_mount+0x24b/0xa40 [ 488.735704][ T9278] __se_sys_mount+0x2e7/0x3d0 [ 488.740976][ T9278] do_syscall_64+0x55/0xa0 [ 488.745996][ T9278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.752474][ T9278] [ 488.752474][ T9278] other info that might help us debug this: [ 488.752474][ T9278] [ 488.762841][ T9278] Possible unsafe locking scenario: [ 488.762841][ T9278] [ 488.770436][ T9278] CPU0 CPU1 [ 488.775873][ T9278] ---- ---- [ 488.781332][ T9278] lock(&ei->xattr_sem); [ 488.785717][ T9278] lock(&sbi->s_writepages_rwsem); [ 488.793667][ T9278] lock(&ei->xattr_sem); [ 488.800931][ T9278] rlock(&sbi->s_writepages_rwsem); [ 488.806313][ T9278] [ 488.806313][ T9278] *** DEADLOCK *** [ 488.806313][ T9278] [ 488.814498][ T9278] 3 locks held by syz.3.880/9278: [ 488.819564][ T9278] #0: ffff888077e920e0 (&type->s_umount_key#31){++++}-{3:3}, at: get_tree_bdev+0x353/0x520 [ 488.829753][ T9278] #1: ffff888077e92608 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x2bf/0xea0 [ 488.839255][ T9278] #2: ffff88805d44a8c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 488.849629][ T9278] [ 488.849629][ T9278] stack backtrace: [ 488.855594][ T9278] CPU: 1 PID: 9278 Comm: syz.3.880 Not tainted syzkaller #0 [ 488.862926][ T9278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 488.873237][ T9278] Call Trace: [ 488.876562][ T9278] [ 488.879523][ T9278] dump_stack_lvl+0x18c/0x250 [ 488.884279][ T9278] ? load_image+0x400/0x400 [ 488.888830][ T9278] ? show_regs_print_info+0x20/0x20 [ 488.894135][ T9278] ? print_circular_bug+0x12b/0x1a0 [ 488.900008][ T9278] check_noncircular+0x2fc/0x400 [ 488.905277][ T9278] ? look_up_lock_class+0x75/0x140 [ 488.910436][ T9278] ? print_deadlock_bug+0x5d0/0x5d0 [ 488.915684][ T9278] ? lockdep_lock+0xf5/0x230 [ 488.920424][ T9278] ? _find_first_zero_bit+0xd3/0x100 [ 488.925792][ T9278] __lock_acquire+0x2df1/0x7d40 [ 488.930700][ T9278] ? mark_lock+0x94/0x320 [ 488.935164][ T9278] ? __lock_acquire+0x1273/0x7d40 [ 488.940265][ T9278] ? verify_lock_unused+0x140/0x140 [ 488.945626][ T9278] ? hlock_conflict+0x5d/0x1f0 [ 488.950458][ T9278] lock_acquire+0x19e/0x420 [ 488.955002][ T9278] ? ext4_writepages+0x1a4/0x350 [ 488.959999][ T9278] ? __might_sleep+0xe0/0xe0 [ 488.964649][ T9278] ? read_lock_is_recursive+0x20/0x20 [ 488.970065][ T9278] ? mark_lock+0x94/0x320 [ 488.974441][ T9278] ? __lock_acquire+0x1347/0x7d40 [ 488.979522][ T9278] percpu_down_read+0x44/0x1a0 [ 488.984348][ T9278] ? ext4_writepages+0x1a4/0x350 [ 488.989345][ T9278] ext4_writepages+0x1a4/0x350 [ 488.994166][ T9278] ? ext4_read_folio+0x2f0/0x2f0 [ 488.999162][ T9278] ? verify_lock_unused+0x140/0x140 [ 489.004495][ T9278] ? ext4_read_folio+0x2f0/0x2f0 [ 489.009752][ T9278] do_writepages+0x3b3/0x630 [ 489.014505][ T9278] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 489.020811][ T9278] ? writeback_single_inode+0x214/0x760 [ 489.026410][ T9278] ? __lock_acquire+0x7d40/0x7d40 [ 489.031479][ T9278] ? do_raw_spin_lock+0x11f/0x2c0 [ 489.036553][ T9278] __writeback_single_inode+0x153/0xec0 [ 489.042161][ T9278] writeback_single_inode+0x21f/0x760 [ 489.047595][ T9278] ? write_inode_now+0x210/0x210 [ 489.052591][ T9278] write_inode_now+0x183/0x210 [ 489.057578][ T9278] ? bdi_split_work_to_wbs+0x910/0x910 [ 489.063103][ T9278] ? do_raw_spin_unlock+0x121/0x230 [ 489.068356][ T9278] iput+0x5ae/0x920 [ 489.072209][ T9278] ext4_xattr_block_set+0x273f/0x32b0 [ 489.077642][ T9278] ? __might_sleep+0xe0/0xe0 [ 489.082291][ T9278] ? xattr_find_entry+0x12b/0x2f0 [ 489.087363][ T9278] ? ext4_xattr_block_find+0x350/0x350 [ 489.092879][ T9278] ? ext4_xattr_block_find+0x2d4/0x350 [ 489.098393][ T9278] ext4_expand_extra_isize_ea+0x12c5/0x1e80 [ 489.104448][ T9278] __ext4_expand_extra_isize+0x306/0x400 [ 489.110225][ T9278] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 489.115740][ T9278] ext4_evict_inode+0x7f3/0xea0 [ 489.120716][ T9278] ? _raw_spin_unlock+0x28/0x40 [ 489.125706][ T9278] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 489.131654][ T9278] ? do_raw_spin_unlock+0x121/0x230 [ 489.136904][ T9278] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 489.142851][ T9278] evict+0x4ca/0x8d0 [ 489.146793][ T9278] ? proc_nr_inodes+0x230/0x230 [ 489.151686][ T9278] ? do_raw_spin_unlock+0x121/0x230 [ 489.156926][ T9278] ? _raw_spin_unlock+0x28/0x40 [ 489.161820][ T9278] ? iput+0x706/0x920 [ 489.165845][ T9278] ext4_orphan_cleanup+0xbec/0x1420 [ 489.171085][ T9278] ? ext4_orphan_del+0xbf0/0xbf0 [ 489.176056][ T9278] ? ext4_register_li_request+0x183/0x940 [ 489.181825][ T9278] ? errseq_check_and_advance+0x66/0x120 [ 489.187500][ T9278] ext4_fill_super+0x5ed3/0x6790 [ 489.192500][ T9278] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 489.198793][ T9278] ? __might_sleep+0xe0/0xe0 [ 489.203467][ T9278] ? read_lock_is_recursive+0x20/0x20 [ 489.208891][ T9278] ? snprintf+0xe9/0x140 [ 489.213181][ T9278] ? down_read_killable+0x340/0x340 [ 489.218528][ T9278] ? setup_bdev_super+0x56b/0x660 [ 489.223591][ T9278] get_tree_bdev+0x3f3/0x520 [ 489.228244][ T9278] ? vfs_parse_fs_string+0x170/0x170 [ 489.233581][ T9278] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 489.239872][ T9278] ? setup_bdev_super+0x660/0x660 [ 489.244938][ T9278] ? apparmor_capable+0x137/0x1a0 [ 489.250005][ T9278] ? bpf_lsm_capable+0x9/0x10 [ 489.254821][ T9278] ? security_capable+0x89/0xb0 [ 489.259723][ T9278] vfs_get_tree+0x8c/0x280 [ 489.264279][ T9278] do_new_mount+0x24b/0xa40 [ 489.268945][ T9278] __se_sys_mount+0x2e7/0x3d0 [ 489.273668][ T9278] ? __x64_sys_mount+0xc0/0xc0 [ 489.278475][ T9278] ? lockdep_hardirqs_on+0x98/0x150 [ 489.283710][ T9278] ? __x64_sys_mount+0x20/0xc0 [ 489.288552][ T9278] do_syscall_64+0x55/0xa0 [ 489.293019][ T9278] ? clear_bhb_loop+0x40/0x90 [ 489.297744][ T9278] ? clear_bhb_loop+0x40/0x90 [ 489.302493][ T9278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 489.308429][ T9278] RIP: 0033:0x7f99dc79c14a [ 489.312922][ T9278] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.332948][ T9278] RSP: 002b:00007f99dd6a8e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 489.341406][ T9278] RAX: ffffffffffffffda RBX: 00007f99dd6a8ee0 RCX: 00007f99dc79c14a [ 489.349480][ T9278] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f99dd6a8ea0 [ 489.357493][ T9278] RBP: 0000200000000180 R08: 00007f99dd6a8ee0 R09: 0000000000800700 [ 489.365507][ T9278] R10: 0000000000800700 R11: 0000000000000246 R12: 0000200000000000 [ 489.374082][ T9278] R13: 00007f99dd6a8ea0 R14: 000000000000046f R15: 000000000000002c [ 489.382287][ T9278] [ 489.423511][ T9278] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.880: iget: bad extra_isize 90 (inode size 256) [ 489.439291][ T9278] EXT4-fs (loop3): Remounting filesystem read-only [ 489.453700][ T9278] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 489.466405][ T9278] EXT4-fs (loop3): 1 orphan inode deleted [ 489.473767][ T9278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.519502][ T8099] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 489.574250][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.595840][ T6317] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 [ 489.612241][ T6317] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 [ 489.632023][ T6317] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 489.673219][ T6317] usb 1-1: USB disconnect, device number 10 [ 489.680369][ T6317] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 489.693180][ T6317] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 [ 489.702922][ T6317] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 [ 489.710520][ T8099] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 489.725857][ T8099] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.735920][ T8099] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 489.745212][ T8099] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.757757][ T8099] usb 2-1: config 0 descriptor?? [ 489.889828][ T8099] usbhid 2-1:0.0: can't add hid device: -71 [ 489.895953][ T8099] usbhid: probe of 2-1:0.0 failed with error -71 [ 489.905437][ T8099] usb 2-1: USB disconnect, device number 12